An improper input validation vulnerability exists in the OAS Engine User Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted series of network requests can lead to unexpected data in the configuration. An attacker can send a sequence of requests to trigger this vulnerability.
References
| Link | Resource |
|---|---|
| https://talosintelligence.com/vulnerability_reports/TALOS-2024-1949 | Exploit Third Party Advisory |
| https://talosintelligence.com/vulnerability_reports/TALOS-2024-1949 | Exploit Third Party Advisory |
| https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1949 |
Configurations
Configuration 1 (hide)
|
History
04 Nov 2025, 19:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
23 Jan 2025, 16:56
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:openautomationsoftware:open_automation_software:19.0.0.57:*:*:*:*:*:*:* | |
| First Time |
Openautomationsoftware open Automation Software
Openautomationsoftware |
|
| References | () https://talosintelligence.com/vulnerability_reports/TALOS-2024-1949 - Exploit, Third Party Advisory |
21 Nov 2024, 09:04
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://talosintelligence.com/vulnerability_reports/TALOS-2024-1949 - |
03 Apr 2024, 17:24
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
03 Apr 2024, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-03 14:15
Updated : 2025-11-04 19:17
NVD link : CVE-2024-27201
Mitre link : CVE-2024-27201
CVE.ORG link : CVE-2024-27201
JSON object : View
Products Affected
openautomationsoftware
- open_automation_software
CWE
CWE-20
Improper Input Validation