CVE-2023-34998 (published 2023-09-05T16:15:05.068Z)
An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to arbitrary authentication. An attacker can sniff network traffic to trigger this vulnerability.
Affected products: Vendor: Open Automation Software
Product: OAS Platform
Versions: v18.00.0072