PT-2017-19090 · Carrier+1 · Sitescan Web+2

Gjoko Krstic + 1 · Publicado 2017-08-25 · Atualizado 2021-07-27 · CVE-2017-9640

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ALC WebCTRL, i-Vu, SiteScan Web versions prior to 6.5

Description A Path Traversal issue was discovered, allowing an authenticated attacker to potentially overwrite files used to execute code.

Recommendations For versions prior to 6.5, update to version 6.5 or later to resolve the issue.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2017-9640

Produtos afetados

Alc Webctrl

Sitescan Web

I-Vu

Referências · 5

• 🔥 https://exploit-db.com/exploits/42543 · Exploit
• http://securityfocus.com/bid/100452 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-17-234-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-9640 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-9640 · Aviso do Fabricante