Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
INEA ME RTU Missing Authentication for Critical Function
Vulnerability Description
Versions of INEA ME RTU firmware 3.36b and prior do not require authentication to the "root" account on the host system of the device. This could allow an attacker to obtain admin-level access to the host system.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
N/A
Vulnerability Title
INEA ME RTU 安全漏洞
Vulnerability Description
INEA ME RTU是INEA公司的一个远程终端单元。实现远程设备与控制中心之间的数据接口。 INEA ME RTU 3.36b及之前版本存在安全漏洞,该漏洞源于不需要对设备主机系统上的root帐户进行身份验证,可能允许攻击者获得对主机系统的管理员级别访问权限。
CVSS Information
N/A
Vulnerability Type
N/A