PT-2017-13210 · Trihedral · Vtscada

Publicado 2017-11-06 · Atualizado 2019-10-09 · CVE-2017-14029

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Trihedral VTScada versions prior to 11.3.03

Description An issue was discovered where the program executes specially crafted malicious dll files placed on the target machine, due to an Uncontrolled Search Path Element.

Recommendations For versions prior to 11.3.03, update to version 11.3.03 or later to resolve the issue.

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2017-14029

Produtos afetados

Vtscada

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-14029 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-14029 · Aviso do Fabricante
• https://ics-cert.us-cert.gov/advisories/ICSA-17-304-02 · Nota