PT-2017-19090 · Carrier+1 · Sitescan Web+2

Gjoko Krstic + 1 · Published 2017-08-25 · Updated 2021-07-27 · CVE-2017-9640

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ALC WebCTRL, i-Vu, SiteScan Web versions prior to 6.5

Description A Path Traversal issue was discovered, allowing an authenticated attacker to potentially overwrite files used to execute code.

Recommendations For versions prior to 6.5, update to version 6.5 or later to resolve the issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2017-9640

Affected Products

Alc Webctrl

Sitescan Web

I-Vu

References · 5

• 🔥 https://exploit-db.com/exploits/42543 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-9640 · Security Note
• https://osv.dev/vulnerability/CVE-2017-9640 · Vendor Advisory
• http://securityfocus.com/bid/100452 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-17-234-01 · Note