CVE-2023-4986
CVSS 3.1 Score 7.2 of 10 (high)
Details
Summary
CVE-2023-44986: A vulnerability has been identified in Supcon InPlant SCADA versions up to 20230901. This issue lies within the unknown functionality of the Project.xml file, resulting in insufficient computational effort when password hashes are manipulated. To exploit this vulnerability, an attacker must gain local access, making the attack complexity relatively high. The exploitation process appears to be difficult and the exploit has been made public, increasing the risk of exploitation. The VDB-239797 identifier has been assigned to this vulnerability, and despite early disclosure, the vendor has not responded.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions