CVE-2022-4779
authentication bypass in elvexys StreamX using StreamView HTML component with public web server feature
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
authentication bypass in elvexys StreamX using StreamView HTML component with public web server feature
| Assigner | NCSC.ch |
| Reserved | 2022-12-28 |
| Published | 2022-12-28 |
| Updated | 2024-08-03 |
StreamX applications from versions 6.02.01 to 6.04.34 are affected by a logic bug that allows to bypass the implemented authentication scheme. StreamX applications using StreamView HTML component with the public web server feature activated are affected.
| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Damian Pfammatter, Cyber-Defense Campus, armasuisse S+T
Daniel Hulliger, Cyber-Defense Campus, armasuisse S+T
https://elvexys.com/products/xpg-gateway-rtu-protocol-converter/streamx-release-notes/
