PT-2017-17145 · Tenable+1 · Tenable Appliance+3

Published 2017-03-08 · Updated 2019-10-03 · CVE-2017-6543

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tenable Nessus versions prior to 6.10.2 Tenable Appliance versions prior to 4.5.0

Description The issue allows a remote, authenticated attacker to upload a crafted file that could be written to anywhere on the system. This could be used to subsequently gain elevated privileges on the system, for example, after a reboot. This issue only affects installations on Windows.

Recommendations For Tenable Nessus versions prior to 6.10.2, update to version 6.10.2 or later to resolve the issue. For Tenable Appliance versions prior to 4.5.0, update to version 4.5.0 or later to resolve the issue.

Fix

Related Identifiers

CVE-2017-6543

Affected Products

Nessus

Tenable Appliance

Tenable Nessus

Windows

References · 4

• http://tenable.com/security/tns-2017-06 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-6543 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6543 · Security Note
• http://securityfocus.com/bid/96418 · Note