CVE-2026-10577:详情

CVE-2026-10577

2026-07-14
13h18 +00:00
Authorization problems
A07-Identif. and Authent. Fail
2026-10-24
21h10 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

A security issue exists within the 1715-AENTR EtherNet/IP Adapter. The affected product exposes a network-accessible debug port that does not enforce proper privilege controls, allowing unauthenticated remote access to intrusive command-line interface (CLI) commands. If exploited, a threat actor could read or delete files, stop tasks, modify memory, and change I/O states, potentially impacting the confidentiality, integrity, and availability of the device.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-306 Missing Authentication for Critical Functionality
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

参考资料