CVE-2022-26043
An external config control vulnerability exists in the OAS Engine SecureAddSecurity functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of network requests can lead to the creation of a custom Security Group. An attacker can send a sequence of requests to trigger this vulnerability.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - talos-cna@cisco.com
- Published
- 2022-05-25
- Last modified
- 2025-04-15
- Weaknesses
- CWE-306
Affected products
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2022-1489
