2 lines
2.7 KiB
JSON
2 lines
2.7 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"GPL750 (XL4)","vendor":"GPL Odorizers","versions":[{"lessThan":"v6.0","status":"affected","version":"v1.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"GPL750 (XL4 Prime)","vendor":"GPL Odorizers","versions":[{"lessThan":"v6.0","status":"affected","version":"v4.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"GPL Odorizers GPL750 (XL7)","vendor":"GPL Odorizers","versions":[{"lessThan":"v20.0","status":"affected","version":"v13.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"GPL Odorizers GPL750 (XL7 Prime)","vendor":"GPL Odorizers","versions":[{"lessThan":"v20.0","status":"affected","version":"v18.4","versionType":"custom"}]}],"source":"ics-cert@hq.dhs.gov"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A low-privileged remote attacker can send Modbus packets to manipulate \nregister values that are inputs to the odorant injection logic such that\n too much or too little odorant is injected into a gas line."},{"lang":"es","value":"Un atacante remoto con pocos privilegios puede enviar paquetes Modbus para manipular los valores de los registros que son entradas para la lógica de inyección de odorante, de tal manera que se inyecte demasiado o muy poco odorante en una línea de gas."}],"id":"CVE-2026-4436","lastModified":"2026-10-26T21:10:00.170","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.6,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.0,"source":"ics-cert@hq.dhs.gov","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-4436","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-04-14T14:03:00.899159Z","version":"2.0.3"}}]},"published":"2026-04-09T20:16:27.903","references":[{"source":"ics-cert@hq.dhs.gov","url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-099-02.json"},{"source":"ics-cert@hq.dhs.gov","url":"https://lincenergysystems-my.sharepoint.com/:f:/p/h_baer/IgDYaHIhXpyLQJvnKPd6b80TAUgV7Lp8qmVYBFUb0lmr7ak?e=JLeADm"},{"source":"ics-cert@hq.dhs.gov","url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-099-02"}],"sourceIdentifier":"ics-cert@hq.dhs.gov","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-306"}],"source":"ics-cert@hq.dhs.gov","type":"Secondary"}]}
|