PT-2018-5335 · Opc Foundation+1 · Opc Foundation Local Discovery Server+1

Publicado 2018-06-13 · Atualizado 2018-08-07 · CVE-2017-11672

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OPC Foundation Local Discovery Server (LDS) versions prior to 1.03.367

Description The issue allows local users to potentially gain privileges due to the OPC Foundation Local Discovery Server (LDS) being installed as a Windows Service without properly quoting the executable path of opcualds.exe.

Recommendations For versions prior to 1.03.367, update to version 1.03.367 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2017-11672

Produtos afetados

Opc Foundation Local Discovery Server

Windows

Referências · 3

• https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2017-11672.pdf · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-11672 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-11672 · Aviso do Fabricante