PT-2018-6515 · Opc Foundation · Opc Foundation Local Discovery Server

Publicado 2018-06-13 · Atualizado 2018-08-08 · CVE-2017-17443

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: OPC Foundation Local Discovery Server (LDS) version 1.03.370

Description: The issue allows attackers to trigger a crash by placing invalid data into the configuration file, requiring an attacker to have access to the file system where the configuration file is stored. If the configuration file is altered, the LDS will be unavailable until it is repaired.

Recommendations: For version 1.03.370, apply the required security update to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-17443

Produtos afetados

Opc Foundation Local Discovery Server

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-17443 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-17443 · Nota de Segurança
• https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2017-17443.pdf · Aviso do Fabricante