PT-2017-12668 · Myscada · Mypro

Published 2017-10-06 · Updated 2019-10-09 · CVE-2017-12730

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions mySCADA myPRO versions 7.0.26 and prior

Description An issue was discovered where application services utilize unquoted search path elements. This could allow an attacker to execute arbitrary code with elevated privileges.

Recommendations For versions 7.0.26 and prior, update to a version that fixes this issue to prevent the execution of arbitrary code with elevated privileges.

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2017-12730

Affected Products

Mypro

References · 4

• https://osv.dev/vulnerability/CVE-2017-12730 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-12730 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-17-255-01 · Note
• http://securityfocus.com/bid/100815 · Note