PT-2017-13211 · Trihedral · Vtscada

Publicado 2017-11-06 · Atualizado 2019-10-09 · CVE-2017-14031

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trihedral VTScada versions 11.3.03 and prior

Description An issue with improper access control was found, allowing a local, non-administrator user to have privileges to read and write to the file system of the target machine.

Recommendations For versions 11.3.03 and prior, restrict access to sensitive file system areas to prevent unauthorized modifications. As a temporary workaround, consider limiting the privileges of non-administrator users to minimize the risk of exploitation.

Correção

Improper Access Control

Improper Privilege Management

Enumeração de Fraquezas

CWE-284

CWE-269

Identificadores relacionados

CVE-2017-14031

Produtos afetados

Vtscada

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-14031 · Aviso do Fabricante
• https://ics-cert.us-cert.gov/advisories/ICSA-17-304-02 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-14031 · Nota de Segurança