Back to feed
EUVD-2024-17280 · Published Mar 27, 2024
A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. A malicious actor could enforce diagnostic texts being displayed as empty strings, if an authorized user uploads a specially crafted stb-language file.
Weaknesses
CWE-434
CVSS scores
- v3.16.8
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access Execution Stealth
References
Potentially impacted assets
See if this affects your attack surface
