Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. A malicious actor could enforce diagnostic texts being displayed as empty strings, if an authorized user uploads a specially crafted stb-language file.

CVSS 1 Total

Learn more
ScoreSeverityVersionVector String
6.8MEDIUM3.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Product Status

Learn more

Versions 8 Total

Default Status: unaffected

affected

  • affected from 12.0.1 through 12.0.14 
  • affected from 12.2.1 through 12.2.11 
  • affected from 12.4.1 through 12.4.11 
  • affected from 12.6.1 through 12.6.9 
  • affected from 12.7.1 through 12.7.6 
  • affected from 13.2.1 through 13.2.6 
  • affected from 13.4.1 through 13.4.4 
  • affected from 13.5.1 through 13.5.3 

Updated:

This container includes required additional information provided by the CVE Program for this vulnerability.

Authorized Data Publishers

Learn more