An improper input validation vulnerability exists in the OAS Engine User Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted series of network requests can lead to unexpected data in the configuration. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://talosintelligence.com/vulnerability_reports/TALOS-2024-1949 | Exploit Third Party Advisory |
| https://talosintelligence.com/vulnerability_reports/TALOS-2024-1949 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
23 Jan 2025, 16:56
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:openautomationsoftware:open_automation_software:19.0.0.57:*:*:*:*:*:*:* | |
| References | () https://talosintelligence.com/vulnerability_reports/TALOS-2024-1949 - Exploit, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
| First Time |
Openautomationsoftware
Openautomationsoftware open Automation Software |
03 Apr 2024, 17:24
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
03 Apr 2024, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-03 14:15
Updated : 2025-01-23 16:56
NVD link : CVE-2024-27201
Mitre link : CVE-2024-27201
JSON object : View
Products Affected
openautomationsoftware
- open_automation_software
CWE
No CWE.