Security advisory: multiple vulnerabilities including Default-credential RCE, Pre-authentication root RCE in atvise SCADA 3.13.0 (atvise GmbH / Bachmann Visutec)

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-08-06 19:23 UTC
  • Importiert: 2026-08-06 20:11 UTC
  • Quelle-ID: full_disc
  • uid_hash: 17102c8d767244b960bea172d2271d0707ccceb1ccac57eda07a8b7757dde25e
Full Disclosure

Inhalt

Posted by disclosure via Fulldisclosure on Aug 06 0day Rubbish Research Team is publicly disclosing 2 vulnerabilities in atvise SCADA 3.13.0 (atvise GmbH / Bachmann

Visutec). The research is published and a proof-of-concept is available.

Vulnerability 1: Pre-authentication root RCE (CVSS 9.8, pre-authentication)

The main service process atserver runs as root and exposes two independent authentication backends: a WebMI HTTP

backend that verifies passwords, and an OPC UA binary protocol...

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
Full Disclosure

full_disc

 threat_intel - de https://seclists.org/rss/fulldisclosure.rss
Zurueck zur Eintrags-Liste