PT-2008-1822 · Ge Fanuc · Ge Fanuc Cimplicity Hmi Scada

Eyal Udassin · Publicado 2008-01-29 · Atualizado 2018-10-15 · CVE-2008-0176

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GE Fanuc CIMPLICITY HMI SCADA system versions prior to 7.0 SIM 9 GE Fanuc CIMPLICITY HMI SCADA system versions prior to 6.1 SP6 Hot fix - 010708 162517 6106

Description The issue is related to a heap-based buffer overflow in the w32rtr.exe component. This allows remote attackers to execute arbitrary code via unknown vectors.

Recommendations For GE Fanuc CIMPLICITY HMI SCADA system versions prior to 7.0 SIM 9, update to version 7.0 SIM 9 or later. For GE Fanuc CIMPLICITY HMI SCADA system versions prior to 6.1 SP6 Hot fix - 010708 162517 6106, apply Hot fix - 010708 162517 6106 or later.

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-0176

Produtos afetados

Ge Fanuc Cimplicity Hmi Scada

Referências · 11

• http://securityfocus.com/archive/1/487076/100/0/threaded · Nota
• http://securityfocus.com/archive/1/487241/100/0/threaded · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0176 · Nota
• http://secunia.com/advisories/28663 · Aviso do Fabricante
• http://securityfocus.com/bid/27447 · Nota
• http://securityreason.com/securityalert/3592 · Nota
• http://kb.cert.org/vuls/id/308556 · Nota
• http://support.gefanuc.com/support/index?page=kbchannel&id=KB12458 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0176 · Nota de Segurança
• http://vupen.com/english/advisories/2008/0306 · Nota
• http://securitytracker.com/id?1019275 · Nota