PT-2017-16846 · Atvise · Atvise Scada

Publicado 2017-05-06 · Atualizado 2019-10-09 · CVE-2017-6031

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions atvise scada versions prior to 3.0

Description A Header Injection issue has been identified in the software, which is caused by an improper neutralization of HTTP headers for scripting syntax. This issue may allow remote code execution.

Recommendations For versions prior to 3.0, update to version 3.0 or later to resolve the issue.

Correção

Special Elements Injection

Enumeração de Fraquezas

CWE-74

CWE-644

Identificadores relacionados

CVE-2017-6031

Produtos afetados

Atvise Scada

Referências · 4

• http://securityfocus.com/bid/97479 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-17-096-01A · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-6031 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-6031 · Aviso do Fabricante