Critical Security Flaws Uncovered in Honeywell Experion DCS and QuickBlox Services
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-31184+1 related CVE | ROZCOM client CWE-798 | 7.8 group max | 2% | ||
| CVE-2023-3188 | Server-Side Request Forgery (SSRF) in GitHub repository owncast/owncast prior to 0.1.0 | 6.5 | 1% | PoC | |
| CVE-2023-33967 | EaseProbe: An SQL injection issue was discovered in EaseProbe before 2.1.0 when using MySQL/PostgreSQL data checking. This problem has been… | 9.8 | <1% | ||
| CVE-2023-36664 | Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix) | 7.8 | 4% |
From the original article
3 min read at thehackernews.com
Ravie Lakshmanan Jul 14, 2023 Vulnerability/ Cyber Threat Multiple security vulnerabilities have been discovered in various services, including Honeywell Experion distributed control system (DCS) and QuickBlox, that, if successfully exploited, could result in severe compromise of affected systems. Dubbed Crit.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.