PT-2013-3941 · Red Lion Controls · Sixnet Rtu+1

Publicado 2013-08-21 · Atualizado 2013-08-23 · CVE-2013-2802

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sixnet UDR versions prior to 2.0 Sixnet RTU firmware versions prior to 4.8

Description The issue allows remote attackers to execute arbitrary code, read, modify, or create files, or obtain file metadata via function opcodes in the universal protocol implementation.

Recommendations For Sixnet UDR versions prior to 2.0, update to version 2.0 or later. For Sixnet RTU firmware versions prior to 4.8, update to version 4.8 or later.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2013-2802

Produtos afetados

Sixnet Rtu

Sixnet Udr

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-2802 · Nota de Segurança
• http://ics-cert.us-cert.gov/advisories/ICSA-13-231-01 · Nota