Versions of INEA ME RTU firmware 3.36b and prior do not require authentication to the "root" account on the host system of the device. This could allow an attacker to obtain admin-level access to the host system.
References
| Link | Resource |
|---|---|
| https://www.cisa.gov/news-events/ics-advisories/icsa-23-304-02 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
| AND |
|
History
18 Nov 2024, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Versions of INEA ME RTU firmware 3.36b and prior do not require authentication to the "root" account on the host system of the device. This could allow an attacker to obtain admin-level access to the host system. |
29 Nov 2023, 20:52
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:inea:me_rtu_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:inea:me_rtu:-:*:*:*:*:*:*:* |
|
| CWE | CWE-287 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| First Time |
Inea
Inea me Rtu Firmware Inea me Rtu |
|
| References | () https://www.cisa.gov/news-events/ics-advisories/icsa-23-304-02 - Third Party Advisory, US Government Resource |
20 Nov 2023, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-11-20 17:15
Updated : 2024-11-18 23:15
NVD link : CVE-2023-29155
Mitre link : CVE-2023-29155
JSON object : View
Products Affected
inea
- me_rtu_firmware
- me_rtu
CWE
CWE-287
Improper Authentication