CVE-2023-4986

Summary

CVE-2023-44986: A vulnerability has been identified in Supcon InPlant SCADA versions up to 20230901. This issue lies within the unknown functionality of the Project.xml file, resulting in insufficient computational effort when password hashes are manipulated. To exploit this vulnerability, an attacker must gain local access, making the attack complexity relatively high. The exploitation process appears to be difficult and the exploit has been made public, increasing the risk of exploitation. The VDB-239797 identifier has been assigned to this vulnerability, and despite early disclosure, the vendor has not responded.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.