CNNVD-202507-275 Information

CNNVD ID

CNNVD-202507-275

CVE-2025-27456

  • CNNVD Published: 2025-07-03

Description (Chinese)

Endress+Hauser MEAC300-FNADE4是越南Endress+Hauser公司的一款具有成本效益的排放数据管理计算机。 Endress+Hauser MEAC300-FNADE4存在安全漏洞,该漏洞源于登录机制未实施足够措施防止短时间内多次认证失败,可能导致暴力破解攻击。

Description (English)

Endress+Hauser MEAC300-FNADE4 is a cost-effective emissions management computer for Endress+Hauser, Viet Nam. There is a security gap in Endress+Hauser MEAC300-FNADE4 which stems from the failure of the login mechanism to implement sufficient measures to prevent multiple certification failures in a short period of time, which could lead to violent breakdown of the attack.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

Endress+Hauser

Published

2025-07-03

Last Modified

2026-02-24

References

https://sick.com/psirt https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.endress.com https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.json https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.pdf

Patch

https://www.endress.com/en/search?filter.text=MEAC300-FNADE4

Share on: