PT-2017-16349 · Schneider Electric · Wonderware Historian

Publicado 2017-02-13 · Atualizado 2019-10-03 · CVE-2017-5155

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Schneider Electric Wonderware Historian versions 2014 R2 SP1 P01 and earlier

Description An issue was discovered where Wonderware Historian creates logins with default passwords, allowing a malicious entity to compromise Historian databases. In some installation scenarios, resources beyond those created by Wonderware Historian may also be compromised.

Recommendations For versions 2014 R2 SP1 P01 and earlier, change the default passwords for all logins created by Wonderware Historian to prevent potential compromise of Historian databases and other resources.

Correção

Enumeração de Fraquezas

CWE-1188

Identificadores relacionados

CVE-2017-5155

Produtos afetados

Wonderware Historian

Referências · 6

• https://ics-cert.us-cert.gov/advisories/ICSA-17-024-01 · Nota
• http://securityfocus.com/bid/95766 · Nota
• http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000115 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-5155 · Aviso do Fabricante
• http://securitytracker.com/id/1037808 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-5155 · Nota de Segurança