PT-2019-7150 · Honeywell · Experion Pks

Publicado 2019-04-08 · Atualizado 2019-10-09 · CVE-2014-9186

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Honeywell Experion PKS versions prior to R400.6 Honeywell Experion PKS versions prior to R410.6 Honeywell Experion PKS versions prior to R430.2

Description A file inclusion issue exists in the confd.exe module, potentially allowing arbitrary file acceptance into the function. This could lead to information disclosure or remote code execution.

Recommendations For versions prior to R400.6, upgrade to version R400.6 or later. For versions prior to R410.6, upgrade to version R410.6 or later. For versions prior to R430.2, upgrade to version R430.2 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

CWE-98

Identificadores relacionados

CVE-2014-9186

Produtos afetados

Experion Pks

Referências · 2

• https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-9186 · Nota de Segurança