PT-2017-13208 · Abb · Abb Fox515T

Published 2017-11-06 · Updated 2023-05-16 · CVE-2017-14025

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ABB FOX515T version 1.0

Description An Improper Input Validation issue has been identified, allowing a local attacker to provide a malicious parameter to the script that is not validated by the application. This could enable the attacker to retrieve any file on the server.

Recommendations For ABB FOX515T version 1.0, consider restricting access to the vulnerable script to minimize the risk of exploitation. As a temporary workaround, avoid using malicious parameters in the script until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-14025

Affected Products

Abb Fox515T

References · 5

• https://osv.dev/vulnerability/CVE-2017-14025 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-14025 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-17-304-01 · Note
• https://t.me/cvenotify/50607 · Telegram Post
• http://securityfocus.com/bid/101662 · Note