漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
CWE-287: Improper Authentication vulnerability exists that could cause an Authentication Bypass when an unauthorized user without permission rights has physical access to the EPAS-UI computer and is able to reboot the workstation and interrupt the normal boot process.
CVSS Information
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
认证机制不恰当
Vulnerability Title
Schneider Electric EcoStruxure Power Automation System User Interface 授权问题漏洞
Vulnerability Description
Schneider Electric EcoStruxure Power Automation System User Interface是法国施耐德电气(Schneider Electric)公司的一款施耐德电气用于电力自动化系统的用户界面软件。用于操作人员与电力自动化系统交互,提高操作效率。 Schneider Electric EcoStruxure Power Automation System User Interface v2.1版本至v2.9版本存在授权问题漏洞,该漏洞源于身份验证不当,可能
CVSS Information
N/A
Vulnerability Type
N/A