漏洞标题
mySCADA myPRO Manager关键功能缺乏身份认证漏洞
漏洞描述信息
mySCADA myPRO Manager 的管理web界面存在未授权访问漏洞,攻击者无需密码即可访问该界面,从而获取敏感信息并上传文件。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
漏洞类别
关键功能的认证机制缺失
漏洞标题
mySCADA myPRO Manager Missing Authentication for Critical Function
漏洞描述信息
The administrative web interface of
mySCADA myPRO Manager
can be accessed without authentication
which could allow an unauthorized attacker to retrieve sensitive
information and upload files without the associated password.
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
漏洞类别
关键功能的认证机制缺失