RONDS EPM version 1.19.5 has a vulnerability in which a function could
allow unauthenticated users to leak credentials. In some circumstances,
an attacker can exploit this vulnerability to execute operating system
(OS) commands.
References
| Link | Resource |
|---|---|
| https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-02 | Third Party Advisory US Government Resource |
Configurations
History
07 Nov 2023, 03:50
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | RONDS EPM version 1.19.5 has a vulnerability in which a function could allow unauthenticated users to leak credentials. In some circumstances, an attacker can exploit this vulnerability to execute operating system (OS) commands. |
23 Jan 2023, 19:35
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-02 - Third Party Advisory, US Government Resource | |
| CPE | cpe:2.3:a:ronds:equipment_predictive_maintenance:1.19.5:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| First Time |
Ronds equipment Predictive Maintenance
Ronds |
17 Jan 2023, 18:55
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-01-17 17:15
Updated : 2023-12-10 14:48
NVD link : CVE-2022-3091
Mitre link : CVE-2022-3091
CVE.ORG link : CVE-2022-3091
JSON object : View
Products Affected
ronds
- equipment_predictive_maintenance
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor