busbaer - MidnightBSD Security Advisories

CVE-2023-42488

EisBaer Scada - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
nvd@nist.gov	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6
cna@cyber.gov.il	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6

Products Affected

Vendor	Product	Version
busbaer	eisbaer_scada	*

CVE-2023-42489

EisBaer Scada - CWE-732: Incorrect Permission Assignment for Critical Resource

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
cna@cyber.gov.il	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6
nvd@nist.gov	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9

Products Affected

Vendor	Product	Version
busbaer	eisbaer_scada	*

CVE-2023-42490

EisBaer Scada - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
cna@cyber.gov.il	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6
nvd@nist.gov	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6

Products Affected

Vendor	Product	Version
busbaer	eisbaer_scada	*

CVE-2023-42491

EisBaer Scada - CWE-285: Improper Authorization

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
cna@cyber.gov.il	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	2.8	5.9
nvd@nist.gov	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9

Products Affected

Vendor	Product	Version
busbaer	eisbaer_scada	*

CVE-2023-42492

EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
cna@cyber.gov.il	7.1	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N	1.8	5.2
nvd@nist.gov	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9

Products Affected

Vendor	Product	Version
busbaer	eisbaer_scada	*

CVE-2023-42493

EisBaer Scada - CWE-256: Plaintext Storage of a Password

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
cna@cyber.gov.il	7.1	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N	1.8	5.2
nvd@nist.gov	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9

Products Affected

Vendor	Product	Version
busbaer	eisbaer_scada	*

CVE-2023-42494

EisBaer Scada - CWE-749: Exposed Dangerous Method or Function

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
nvd@nist.gov	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9
cna@cyber.gov.il	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6

Products Affected

Vendor	Product	Version
busbaer	eisbaer_scada	*

Advisories for busbaer