PT-2017-13211 · Trihedral · Vtscada

Published 2017-11-06 · Updated 2019-10-09 · CVE-2017-14031

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trihedral VTScada versions 11.3.03 and prior

Description An issue with improper access control was found, allowing a local, non-administrator user to have privileges to read and write to the file system of the target machine.

Recommendations For versions 11.3.03 and prior, restrict access to sensitive file system areas to prevent unauthorized modifications. As a temporary workaround, consider limiting the privileges of non-administrator users to minimize the risk of exploitation.

Fix

Improper Access Control

Improper Privilege Management

Weakness Enumeration

CWE-284

CWE-269

Related Identifiers

CVE-2017-14031

Affected Products

Vtscada

References · 3

• https://osv.dev/vulnerability/CVE-2017-14031 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-14031 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-17-304-02 · Note