PT-2018-18284 · Foxboro · Foxboro Dcs Control Core Services+2

Publicado 2018-12-24 · Atualizado 2020-08-24 · CVE-2018-7793

Positive Technologies (AI Summary)

CVSS v3.1

8.7

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions: FoxView HMI SCADA versions prior to Foxboro DCS Control Core Services 9.4 and FoxView 10.5

Description: A Credential Management issue exists that could lead to unauthorized disclosure, modification, or disruption in service when the password is modified without permission.

Recommendations: For versions prior to Foxboro DCS Control Core Services 9.4 and FoxView 10.5, update to Foxboro DCS Control Core Services 9.4 or FoxView 10.5 to resolve the issue.

Correção

Identificadores relacionados

CVE-2018-7793

Produtos afetados

Foxview

Foxview Hmi Scada

Foxboro Dcs Control Core Services

Referências · 3

• https://osv.dev/vulnerability/CVE-2018-7793 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-7793 · Nota de Segurança
• https://schneider-electric.com/en/download/document/SEVD-2018-353-03 · Aviso do Fabricante