This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-65310 | BDVDB-2026-354475 Detail

ANDRITZHIPASE-250

Description#

ANDRITZ HIPASE-250 (formerly 250 SCALA), in the default configuration of affected versions, exposes its data and configuration endpoint without any authentication and permissive CORS on every response. An unauthenticated attacker with network access can read live process values and server configuration.

Impact#

CAPEC-36 Using Unpublished Interfaces or Functionality

Weaknesses#

  • CWE-306 Missing Authentication for Critical Function
  • CWE-942 Permissive cross-domain security policy with untrusted domains

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.