Versions of INEA ME RTU firmware 3.36b and prior do not require authentication to the "root" account on the host system of the device. This could allow an attacker to obtain admin-level access to the host system.
References
| Link | Resource |
|---|---|
| https://www.cisa.gov/news-events/ics-advisories/icsa-23-304-02 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
| AND |
|
History
18 Nov 2024, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) Versions of INEA ME RTU firmware 3.36b and prior do not require authentication to the "root" account on the host system of the device. This could allow an attacker to obtain admin-level access to the host system. |
29 Nov 2023, 20:52
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:inea:me_rtu_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:inea:me_rtu:-:*:*:*:*:*:*:* |
|
| References | () https://www.cisa.gov/news-events/ics-advisories/icsa-23-304-02 - Third Party Advisory, US Government Resource | |
| CWE | CWE-287 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| First Time |
Inea me Rtu
Inea Inea me Rtu Firmware |
20 Nov 2023, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-11-20 17:15
Updated : 2024-11-18 23:15
NVD link : CVE-2023-29155
Mitre link : CVE-2023-29155
CVE.ORG link : CVE-2023-29155
JSON object : View
Products Affected
inea
- me_rtu_firmware
- me_rtu
CWE
CWE-287
Improper Authentication