vulnerability
Frangoteam FUXA SCADA/HMI
Critical
Summary
This advisory details a critical vulnerability in Frangoteam FUXA SCADA/HMI software versions up to 1.3.1, allowing unauthenticated remote attackers to enumerate user accounts and role assignments. The vulnerability stems from a flaw in the REST API’s path normalization process, enabling attackers to bypass authentication. Organizations are urged to update to version 1.3.2 or later to mitigate the risk.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data