漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
AzeoTech DAQFactory
Vulnerability Description
The affected product is vulnerable to cookie information being transmitted as cleartext over HTTP. An attacker can capture network traffic, obtain the user’s cookie and take over the account.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Vulnerability Type
敏感数据的明文传输
Vulnerability Title
AzeoTech DAQFactory 信息泄露漏洞
Vulnerability Description
AzeoTech DAQFactory是提供您轻松创建 HMI/SCADA 应用程序所需的工具。 AzeoTech DAQFactory 中存在信息泄露漏洞,该漏洞源于产品未对Cookie数据进行加密。攻击者可通过抓包获取从Cookie中获取敏感数据。
CVSS Information
N/A
Vulnerability Type
N/A