Beveiligingsadvies

CVE-2026-0647

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-16 14:20:12

Laatst bijgewerkt 2026-06-16 15:23:45

Toegewezen door Rockwell

CVSS-score 8.8

Status PUBLISHED

Beschrijving

An improper authentication security issue exists within the 1794-AENTR adapter's embedded web server. The vulnerability allows an unauthenticated attacker to change the device's web interface password by sending a crafted HTTP GET request to a specific endpoint, without any prior authentication being required. If exploited, this could lead to unauthorized access, account takeover, and loss of the device’s embedded web server’s availability.

← Alle CVE's bekijken Bekijk op cve.org ↗