CVE-2026-58477: dan-in-ca sustainable irrigation platform

csirt@kutim:~/threat-intel/cve/CVE-2026-58477

CVSS 7.5 · High EPSS 0,51%

Kerentanan Improperly Controlled Modification of Dynamically-Determined Object Attributes pada dan-in-ca sustainable irrigation platform. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a mass assignment vulnerability that allows unauthenticated attackers to overwrite sensitive configuration settings by supplying arbitrary parameter names in HTTP requests. Attackers can manipulate parameters corresponding to sensitive values such as the passphrase and listening port, and can also achieve the same result through cross-site request forgery due to the absence of adequate request validation.

Rincian

Terbit di NVD: 14 Juli 2026
Terakhir diubah: 14 Juli 2026
Status NVD: Analyzed
CVSS 3.1: 7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-915: Improperly Controlled Modification of Dynamically-Determined Object Attributes
EPSS (30 hari): 0,51% peluang dieksploitasi; lebih tinggi dari 42,0% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
dan-in-ca	sustainable irrigation platform	Semua versi hingga 5.2.16

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://www.vulncheck.com/advisories/sustainable-irrigation-platform-mass-assignment-via-http-parameters advisory pihak ketiga
https://www.zeroscience.mk/#/advisories/ZSL-2026-5997 exploit · advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.