A file write vulnerability exists in the OAS Engine Tags Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted series of network requests can lead to arbitrary file creation or overwrite. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://talosintelligence.com/vulnerability_reports/TALOS-2024-1950 | Exploit Third Party Advisory |
| https://talosintelligence.com/vulnerability_reports/TALOS-2024-1950 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
23 Jan 2025, 16:56
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Openautomationsoftware
Openautomationsoftware open Automation Software |
|
| CWE | NVD-CWE-Other | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
| References | () https://talosintelligence.com/vulnerability_reports/TALOS-2024-1950 - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:openautomationsoftware:open_automation_software:19.0.0.57:*:*:*:*:*:*:* |
03 Apr 2024, 17:24
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
03 Apr 2024, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-03 14:15
Updated : 2025-01-23 16:56
NVD link : CVE-2024-21870
Mitre link : CVE-2024-21870
JSON object : View
Products Affected
openautomationsoftware
- open_automation_software
CWE