PT-2017-16857 · Trihedral · Vtscada

Published 2017-06-21 · Updated 2019-10-09 · CVE-2017-6043

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Trihedral VTScada versions prior to 11.2.26

Description A Resource Consumption issue was discovered. The client does not properly validate the input or limit the amount of resources that are utilized by an attacker, which can be used to consume more resources than are available.

Recommendations For versions prior to 11.2.26, update to version 11.2.26 or later to resolve the issue.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2017-6043

Affected Products

Vtscada

References · 4

• https://ics-cert.us-cert.gov/advisories/ICSA-17-164-01 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2017-6043 · Security Note
• https://osv.dev/vulnerability/CVE-2017-6043 · Vendor Advisory
• http://securityfocus.com/bid/99066 · Note