PT-2017-19103 · Fuji Electric · Monitouch V-Sft

Publicado 2017-08-10 · Atualizado 2019-10-03 · CVE-2017-9662

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Fuji Electric Monitouch V-SFT versions prior to 5.4.43.0

Description An issue with improper privilege management was found, which could allow an authenticated attacker with local access to escalate privileges due to the software being installed in a directory with weak access controls by default.

Recommendations For versions prior to 5.4.43.0, update to version 5.4.43.0 or later to resolve the issue.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2017-9662

ZDI-17-646

Produtos afetados

Monitouch V-Sft

Referências · 6

• https://zerodayinitiative.com/advisories/ZDI-17-646 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2017-9662 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-9662 · Aviso do Fabricante
• http://securityfocus.com/bid/100268 · Nota
• http://zerodayinitiative.com/advisories/ZDI-17-646 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-17-222-04 · Nota