PT-2017-19314 · Schneider Electric · Clearscada

Publicado 2017-09-25 · Atualizado 2018-12-31 · CVE-2017-9962

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Schneider Electric's ClearSCADA versions prior to August 2017

Description The issue concerns a memory allocation vulnerability. Malformed requests can be sent to ClearSCADA client applications, causing unexpected behavior. The client applications affected include ViewX and the Server Icon.

Recommendations For versions prior to August 2017, update to a version released after August 2017 to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2017-9962

Produtos afetados

Clearscada

Referências · 3

• http://schneider-electric.com/en/download/document/SEVD-2017-264-01 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-9962 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-9962 · Nota de Segurança