PT-2017-17384 · Siemens · Siemens Viewport For Web Office Portal

Publicado 2017-08-08 · Atualizado 2019-10-09 · CVE-2017-6869

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Siemens ViewPort for Web Office Portal versions prior to revision 1453

Description A vulnerability was discovered that could allow an unauthenticated remote user to upload arbitrary code and execute it with the permissions of the operating-system user running the web server by sending specially crafted network packets to port 443/TCP or port 80/TCP.

Recommendations For versions prior to revision 1453, update to revision 1453 or later to resolve the issue. As a temporary workaround, consider restricting access to ports 443/TCP and 80/TCP to minimize the risk of exploitation.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2017-6869

Produtos afetados

Siemens Viewport For Web Office Portal

Referências · 3

• https://siemens.com/cert/pool/cert/siemens_security_advisory_ssa-545214.pdf · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-6869 · Nota de Segurança
• http://securityfocus.com/bid/99343 · Nota