CVE-2021-25910

Summary

Improper Authentication vulnerability in the cookie parameter of ZIV AUTOMATION 4CCT-EA6-334126BF allows a local attacker to perform modifications in several parameters of the affected device as an authenticated user.

Affected Software

Weaknesses

• CWE-287: CWE-287 Improper Authentication

ADP Enrichment

CVE Program Container

Additional References

• https://www.incibe-cert.es/en/early-warning/ics-advisories/4cct-vulnerable-improper-authentication

References

• https://www.incibe-cert.es/en/early-warning/ics-advisories/4cct-vulnerable-improper-authentication

• ←Previous
• Next→