PT-2017-12654 · Azeotech · Daqfactory

Publicado 2017-09-09 · Atualizado 2019-10-09 · CVE-2017-12699

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions AzeoTech DAQFactory versions prior to 17.1

Description An issue with incorrect default permissions was found, allowing local, non-administrative users to potentially replace or modify original application files with malicious ones.

Recommendations For versions prior to 17.1, update to version 17.1 or later to resolve the issue.

Correção

Incorrect Default Permissions

Enumeração de Fraquezas

CWE-276

Identificadores relacionados

CVE-2017-12699

Produtos afetados

Daqfactory

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-12699 · Nota de Segurança
• http://securityfocus.com/bid/100522 · Nota
• https://osv.dev/vulnerability/CVE-2017-12699 · Aviso do Fabricante
• https://ics-cert.us-cert.gov/advisories/ICSA-17-241-01 · Nota