by Kastro
Paper/Archive/CVE-2023-1899

CVE-2023-1899

Atlas Copco Power Focus — CVE-2023-1899

EPSS 0.3%CVSS 9.4
critical.is priorityof 100
34
CVSS 9.4 (CNA)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 27.6.276 × 205.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Atlas Copco Power Focus 6000 web server is not a secure connection by default, which could allow an attacker to gain sensitive information by monitoring network traffic between user and controller.

Affected

ProductAffectedFixed inSource
Power Focus6000–CNA

Scores by source

icscert (CNA)9.4CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcisa.gov/news-events/ics-advisories/icsa-23-159-01