CVE-2023-4985

ÉLEVÉE 7.8CVE-2023-4985 · Published 15/09/2023 · updated 17/06/2026

En bref

CVE-2023-4985 est une vulnérabilité ÉLEVÉE (CVSS 7.8) touchant inplant scada (supcon).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.38%, plus élevée que 31.8% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
inplant scada supcon	`≤ 20230901`	No fix yet

Description

A vulnerability classified as critical has been found in Supcon InPlant SCADA up to 20230901. Affected is an unknown function of the file Project.xml. The manipulation leads to improper authentication. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239796. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

References

drive.google.com/file/d/1V_O95QddCGdZzYGgx7tkMOYQ5i_alv69/view · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Autres vulnérabilités de inplant scada

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free