PT-2012-1798 · Siemens · Siemens Tecnomatix Factorylink+1

Publicado 2012-01-08 · Atualizado 2012-01-09 · CVE-2011-4056

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Siemens Tecnomatix FactoryLink versions 6.6.1 through 8.0.2.54

Description The issue allows remote attackers to create or overwrite arbitrary files. This is achieved via the save method of an unspecified ActiveX control in ActBar.ocx.

Recommendations For versions 6.6.1, 7.5.217, and 8.0.2.54, consider disabling the use of the save method in the ActiveX control until a patch is available. Restrict access to the ActBar.ocx module to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2011-4056

Produtos afetados

Actbar.Ocx

Siemens Tecnomatix Factorylink

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2011-4056 · Nota de Segurança
• http://usdata.com/sea/factorylink/en/p_nav5.asp · Aviso do Fabricante
• http://us-cert.gov/control_systems/pdf/ICSA-11-343-01.pdf · Nota