BDU:2026-01771

Vulnerability from fstec - Published: 12.08.2025
VLAI Severity ?
Title
Уязвимость сетевого программного обеспечения Siemens, связанная с неконтролируемым элементом пути поиска, позволяющая нарушителю выполнить произвольный код
Description
Уязвимость сетевого программного обеспечения Siemens связана с неконтролируемым элементом пути поиска. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код
Severity ?
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Vendor
Siemens AG, Сообщество свободного программного обеспечения
Software Name
SINEMA Remote Connect, SIMATIC WinCC Runtime Advanced, SIMATIC WinCC Runtime Professional, SIMATIC PCS 7, SIMATIC WinCC, Simatic NET PC-Software, TIA Project-Server, SIMATIC Route Control, SIMATIC BATCH, OpenPCS 7, S7-PCT, Simatic Automation Tool, Siemens Totally Integrated Automation Portal (TIA Portal), SIMATIC Process Historian, Automation License Manager, SIMATIC PCS neo, TeleControl Server Basic, SINEC-NMS, TIA Administrator, CEMAT, CP PtP Param configuring interface, Create MyConfig (CMC), Energy Support Library (EnSL), FM Configuration Package, Modular PID CTRL Tool, MultiFieldbus Configuration Tool (MFCT), SINETPLAN, SIMATIC Automation Tool SDK Windows, SIMATIC eaSie Core Package, SIMATIC eaSie Document Skills, SIMATIC eaSie PCS 7 Skill Package, SIMATIC eaSie Workflow Skills, SIMATIC Logon, SIMATIC Management Agent, SIMATIC Management Console, SIMATIC ODK 1500S, SIMATIC PDM, SIMATIC Process Function Library (PFL), SIMATIC PDM Maintenance Station, SIMATIC ProSave, SIMATIC S7 F Systems, SIMATIC S7-1500 Software Controller, SIMATIC S7-FCT, SIMATIC S7-PLCSIM Advanced, SIMATIC S7-PLCSIM, SIMATIC Safety Matrix, SIMATIC STEP 7 CFC, SIMATIC STEP 7, SIMATIC Target, SIMATIC WinCC flexible ES, SIMATIC WinCC TeleControl, SIMATIC WinCC Unified Line Coordination, SIMATIC WinCC Unified Sequence, SIMATIC D7-SYS, SIMIT Rapid Tester, SIMIT Simulation Platform, SITRANS, Standard PID CTRL Tool, Siemens TIA Portal Cloud Connector, WinCC Panel Image Setup
Software Version
- (SINEMA Remote Connect), - (SIMATIC WinCC Runtime Advanced), - (SIMATIC WinCC Runtime Professional), 9.0 (SIMATIC PCS 7), 7.5 (SIMATIC WinCC), 16 (Simatic NET PC-Software), 17 (TIA Project-Server), 9.1 (SIMATIC PCS 7), 18 (Simatic NET PC-Software), 9.1 (SIMATIC Route Control), 9.1 (SIMATIC BATCH), 9.1 (OpenPCS 7), - (S7-PCT), - (Simatic Automation Tool), 8.0 (SIMATIC WinCC), 17 (Siemens Totally Integrated Automation Portal (TIA Portal)), 18 (Siemens Totally Integrated Automation Portal (TIA Portal)), 2020 (SIMATIC Process Historian), 2022 (SIMATIC Process Historian), до 6.2 Upd3 (Automation License Manager), 19 (Siemens Totally Integrated Automation Portal (TIA Portal)), 5.0 (SIMATIC PCS neo), до 3.1.2.2 (TeleControl Server Basic), 20 (Siemens Totally Integrated Automation Portal (TIA Portal)), до 4.0 (SINEC-NMS), до 3.0.6 (TIA Administrator), 6.0 (Automation License Manager), 10.0 (CEMAT), - (CP PtP Param configuring interface), - (Create MyConfig (CMC)), - (Energy Support Library (EnSL)), - (FM Configuration Package), - (Modular PID CTRL Tool), - (MultiFieldbus Configuration Tool (MFCT)), 10.0 (OpenPCS 7), - (SINETPLAN), - (SIMATIC Automation Tool SDK Windows), 10.0 (SIMATIC BATCH), - (SIMATIC eaSie Core Package), - (SIMATIC eaSie Document Skills), - (SIMATIC eaSie PCS 7 Skill Package), - (SIMATIC eaSie Workflow Skills), 1.6 (SIMATIC Logon), 2.0 (SIMATIC Logon), - (SIMATIC Management Agent), - (SIMATIC Management Console), 17 (Simatic NET PC-Software), 19 (Simatic NET PC-Software), до 20.0 Update 1 (Simatic NET PC-Software), - (SIMATIC ODK 1500S), 10.0 (SIMATIC PCS 7), 6.0 (SIMATIC PCS neo), 9.2 (SIMATIC PDM), 9.3 (SIMATIC PDM), 2.1 (SIMATIC PCS 7), 2.2 (SIMATIC PCS 7), 4.0 (SIMATIC Process Function Library (PFL)), 5.0 (SIMATIC PDM Maintenance Station), 2024 (SIMATIC Process Historian), 17 (SIMATIC ProSave), 18 (SIMATIC ProSave), до V19 Update 4 (SIMATIC ProSave), 20 (SIMATIC ProSave), 10.0 (SIMATIC Route Control), 6.3 (SIMATIC S7 F Systems), 6.4 (SIMATIC S7 F Systems), 2 (SIMATIC S7-1500 Software Controller), 3 (SIMATIC S7-1500 Software Controller), до 4.0.1 (SIMATIC S7-FCT), до V7.0 Update 1 (SIMATIC S7-PLCSIM Advanced), 17 (SIMATIC S7-PLCSIM), 18 (SIMATIC S7-PLCSIM), 19 (SIMATIC S7-PLCSIM), до V20 Update 1 (SIMATIC S7-PLCSIM), - (SIMATIC Safety Matrix), 19 (SIMATIC STEP 7 CFC), 20 (SIMATIC STEP 7 CFC), 5.7 (SIMATIC STEP 7), - (SIMATIC Target), до V8.1 Update 3 (SIMATIC WinCC), - (SIMATIC WinCC flexible ES), - (SIMATIC WinCC TeleControl), - (SIMATIC WinCC Unified Line Coordination), - (SIMATIC WinCC Unified Sequence), - (SIMATIC D7-SYS), - (SIMIT Rapid Tester), - (SIMIT Simulation Platform), - (SITRANS), - (Standard PID CTRL Tool), - (Siemens TIA Portal Cloud Connector), - (TIA Project-Server), - (WinCC Panel Image Setup)
Possible Mitigations
Использование рекомендаций: https://cert-portal.siemens.com/productcert/html/ssa-282044.html
Reference
https://cert-portal.siemens.com/productcert/html/ssa-282044.html
CWE
CWE-427
To clipboard 

{
  "CVSS 2.0": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
  "CVSS 4.0": "AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Siemens AG, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (SINEMA Remote Connect), - (SIMATIC WinCC Runtime Advanced), - (SIMATIC WinCC Runtime Professional), 9.0 (SIMATIC PCS 7), 7.5 (SIMATIC WinCC), 16 (Simatic NET PC-Software), 17 (TIA Project-Server), 9.1 (SIMATIC PCS 7), 18 (Simatic NET PC-Software), 9.1 (SIMATIC Route Control), 9.1 (SIMATIC BATCH), 9.1 (OpenPCS 7), - (S7-PCT), - (Simatic Automation Tool), 8.0 (SIMATIC WinCC), 17 (Siemens Totally Integrated Automation Portal (TIA Portal)), 18 (Siemens Totally Integrated Automation Portal (TIA Portal)), 2020 (SIMATIC Process Historian), 2022 (SIMATIC Process Historian), \u0434\u043e 6.2 Upd3 (Automation License Manager), 19 (Siemens Totally Integrated Automation Portal (TIA Portal)), 5.0 (SIMATIC PCS neo), \u0434\u043e 3.1.2.2 (TeleControl Server Basic), 20 (Siemens Totally Integrated Automation Portal (TIA Portal)), \u0434\u043e 4.0 (SINEC-NMS), \u0434\u043e 3.0.6 (TIA Administrator), 6.0 (Automation License Manager), 10.0 (CEMAT), - (CP PtP Param configuring interface), - (Create MyConfig (CMC)), - (Energy Support Library (EnSL)), - (FM Configuration Package), - (Modular PID CTRL Tool), - (MultiFieldbus Configuration Tool (MFCT)), 10.0 (OpenPCS 7), - (SINETPLAN), - (SIMATIC Automation Tool SDK Windows), 10.0 (SIMATIC BATCH), - (SIMATIC eaSie Core Package), - (SIMATIC eaSie Document Skills), - (SIMATIC eaSie PCS 7 Skill Package), - (SIMATIC eaSie Workflow Skills), 1.6 (SIMATIC Logon), 2.0 (SIMATIC Logon), - (SIMATIC Management Agent), - (SIMATIC Management Console), 17 (Simatic NET PC-Software), 19 (Simatic NET PC-Software), \u0434\u043e 20.0 Update 1 (Simatic NET PC-Software), - (SIMATIC ODK 1500S), 10.0 (SIMATIC PCS 7), 6.0 (SIMATIC PCS neo), 9.2 (SIMATIC PDM), 9.3 (SIMATIC PDM), 2.1 (SIMATIC PCS 7), 2.2 (SIMATIC PCS 7), 4.0 (SIMATIC Process Function Library (PFL)), 5.0 (SIMATIC PDM Maintenance Station), 2024 (SIMATIC Process Historian), 17 (SIMATIC ProSave), 18 (SIMATIC ProSave), \u0434\u043e V19 Update 4 (SIMATIC ProSave), 20 (SIMATIC ProSave), 10.0 (SIMATIC Route Control), 6.3 (SIMATIC S7 F Systems), 6.4 (SIMATIC S7 F Systems), 2 (SIMATIC S7-1500 Software Controller), 3 (SIMATIC S7-1500 Software Controller), \u0434\u043e 4.0.1 (SIMATIC S7-FCT), \u0434\u043e V7.0 Update 1 (SIMATIC S7-PLCSIM Advanced), 17 (SIMATIC S7-PLCSIM), 18 (SIMATIC S7-PLCSIM), 19 (SIMATIC S7-PLCSIM), \u0434\u043e V20 Update 1 (SIMATIC S7-PLCSIM), - (SIMATIC Safety Matrix), 19 (SIMATIC STEP 7 CFC), 20 (SIMATIC STEP 7 CFC), 5.7 (SIMATIC STEP 7), - (SIMATIC Target), \u0434\u043e V8.1 Update 3 (SIMATIC WinCC), - (SIMATIC WinCC flexible ES), - (SIMATIC WinCC TeleControl), - (SIMATIC WinCC Unified Line Coordination), - (SIMATIC WinCC Unified Sequence), - (SIMATIC D7-SYS), - (SIMIT Rapid Tester), - (SIMIT Simulation Platform), - (SITRANS), - (Standard PID CTRL Tool), - (Siemens TIA Portal Cloud Connector), - (TIA Project-Server), - (WinCC Panel Image Setup)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://cert-portal.siemens.com/productcert/html/ssa-282044.html",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "12.08.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "13.02.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "13.02.2026",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2026-01771",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2025-30033, SSA-282044",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "SINEMA Remote Connect, SIMATIC WinCC Runtime Advanced, SIMATIC WinCC Runtime Professional, SIMATIC PCS 7, SIMATIC WinCC, Simatic NET PC-Software, TIA Project-Server, SIMATIC Route Control, SIMATIC BATCH, OpenPCS 7, S7-PCT, Simatic Automation Tool, Siemens Totally Integrated Automation Portal (TIA Portal), SIMATIC Process Historian, Automation License Manager, SIMATIC PCS neo, TeleControl Server Basic, SINEC-NMS, TIA Administrator, CEMAT, CP PtP Param configuring interface, Create MyConfig (CMC), Energy Support Library (EnSL), FM Configuration Package, Modular PID CTRL Tool, MultiFieldbus Configuration Tool (MFCT), SINETPLAN, SIMATIC Automation Tool SDK Windows, SIMATIC eaSie Core Package, SIMATIC eaSie Document Skills, SIMATIC eaSie PCS 7 Skill Package, SIMATIC eaSie Workflow Skills, SIMATIC Logon, SIMATIC Management Agent, SIMATIC Management Console, SIMATIC ODK 1500S, SIMATIC PDM, SIMATIC Process Function Library (PFL), SIMATIC PDM Maintenance Station, SIMATIC ProSave, SIMATIC S7 F Systems, SIMATIC S7-1500 Software Controller, SIMATIC S7-FCT, SIMATIC S7-PLCSIM Advanced, SIMATIC S7-PLCSIM, SIMATIC Safety Matrix, SIMATIC STEP 7 CFC, SIMATIC STEP 7, SIMATIC Target, SIMATIC WinCC flexible ES, SIMATIC WinCC TeleControl, SIMATIC WinCC Unified Line Coordination, SIMATIC WinCC Unified Sequence, SIMATIC D7-SYS, SIMIT Rapid Tester, SIMIT Simulation Platform, SITRANS, Standard PID CTRL Tool, Siemens TIA Portal Cloud Connector, WinCC Panel Image Setup",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Siemens, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u043c \u043f\u0443\u0442\u0438 \u043f\u043e\u0438\u0441\u043a\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u044d\u043b\u0435\u043c\u0435\u043d\u0442 \u043f\u0443\u0442\u0438 \u043f\u043e\u0438\u0441\u043a\u0430 (CWE-427)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Siemens \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u043c \u043f\u0443\u0442\u0438 \u043f\u043e\u0438\u0441\u043a\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://cert-portal.siemens.com/productcert/html/ssa-282044.html",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0410\u0421\u0423 \u0422\u041f, \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0410\u0421\u0423 \u0422\u041f, \u0421\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0410\u0421\u0423 \u0422\u041f, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434, \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0437\u0430\u0449\u0438\u0442\u044b",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-427",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,2)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 4.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,5)"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.