Description
A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.44), Climatix POL909 (AWM module) (All versions < V11.36). The handling of log files in the web application of affected devices contains an information disclosure vulnerability which could allow logged in users to access sensitive files.
References
https://cert-portal.siemens.com/productcert/pdf/ssa-252466.pdf
PatchVendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-252466.pdf
PatchVendor Advisory
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
6.5 · Medium
Information
Source identifier
Vulnerability status
Modified
Published
2022-03-08T11:15:10.763Z
4 years agoLast modified
2024-11-21T05:26:23.123Z
1 year ago