[CVE-2026-104935] Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated att…

Descripción técnica

Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.

Puntuación CVSS

Score: 8.6/10 — Severidad: HIGH — Estado NIST: Undergoing Analysis

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Debilidades (CWE)

CWE-290

Fuente oficial

Publicado en NIST NVD.