CVE-2024-39287

Summary

Dorsett Controls Central Server update server has potential information leaks with an unprotected file that contains passwords and API keys.

Affected Software

Weaknesses

• CWE-200: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-221-01
• https://portal.dtscada.com/#/security-bulletins?bulletin=1

• ←Previous
• Next→