CVE-2024-27201
Openautomationsoftware
CVE-2024-27201: Improper input validation in Open Automation Software (OAS) Platform could lead to unexpected data in the configuration. This vulnerability allows attackers to manipulate network requests, potentially compromising the system.
CVE-2024-27201 affects Open Automation Software OAS Platform V19.00.0057, specifically within the OAS Engine User Configuration. Despite a CVSS score of 0, the SVRS of 30 suggests a moderate risk, indicating that while not critical, the vulnerability should be addressed. An attacker exploiting this flaw could craft specific network requests causing the system to behave in an unintended manner by injecting unexpected data into the configuration. This could potentially lead to unauthorized access or data corruption. While not deemed immediately critical, continuous monitoring is advised due to the "In The Wild" tag. Proper input validation is crucial to mitigate risks.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.