Rewterz Threat Advisory – ICS: Schneider Electric IGSS
October 13, 2021Rewterz Threat Advisory – ICS: Siemens SINEC NMS and SIMATIC
October 13, 2021Rewterz Threat Advisory – ICS: Schneider Electric IGSS
October 13, 2021Rewterz Threat Advisory – ICS: Siemens SINEC NMS and SIMATIC
October 13, 2021Severity
Medium
Analysis Summary
CVE-2021-38431
An authenticated user can use API functions to disclose project names and paths from other users.
Impact
- Unauthorized Access
Affected Vendors
- Advantech
Affected Products
- WebAccess/SCADA: Versions 9.0.3 and prior
Remediation
Refer to CERT-ICS Advisory for the patch, upgrade, or suggested workaround information.