Description (CNA)
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.2.10, an authentication bypass vulnerability in FUXA allows an unauthenticated, remote attacker to gain administrative access via the heartbeat refresh API and execute arbitrary code on the server. This issue has been patched in FUXA version 1.2.10.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| frangoteam / FUXA | affected < 1.2.10 |
CWE
CWE-285, CWE-287
References
- https://github.com/frangoteam/FUXA/security/advisories/GHSA-vwcg-c828-9822
- https://github.com/frangoteam/FUXA/commit/fe82348d160904d0013b9a3e267d50158f5c7afb
ADP enrichment
No English description supplied.
No references supplied.