CVE-2024-2882CWE-862

Missing Authorization in SDG Technologies PnPSCADA

Critical · published June 27, 2024

CVSS v4.0
9.3
EPSS
1%
Percentile
50.8
In the wild
Unconfirmed
What it is

SDG Technologies PnPSCADA allows a remote attacker to attach various entities without requiring system authentication. This breach could potentially lead to unauthorized control, data manipulation, and access to sensitive information within the SCADA system.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00656 · 50.8th percentile
Weakness
CWE-862 · Missing Authorization
Published
2024-06-27T18:55Z
EPSS history
Timeline
  • 27 JUN 18:55Z
    Missing Authorization in SDG Technologies PnPSCADA
    cvelistv5