PT-2017-19103 · Fuji Electric · Monitouch V-Sft

Published 2017-08-10 · Updated 2019-10-03 · CVE-2017-9662

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Fuji Electric Monitouch V-SFT versions prior to 5.4.43.0

Description An issue with improper privilege management was found, which could allow an authenticated attacker with local access to escalate privileges due to the software being installed in a directory with weak access controls by default.

Recommendations For versions prior to 5.4.43.0, update to version 5.4.43.0 or later to resolve the issue.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2017-9662

ZDI-17-646

Affected Products

Monitouch V-Sft

References · 6

• https://zerodayinitiative.com/advisories/ZDI-17-646 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-9662 · Security Note
• https://osv.dev/vulnerability/CVE-2017-9662 · Vendor Advisory
• http://securityfocus.com/bid/100268 · Note
• http://zerodayinitiative.com/advisories/ZDI-17-646 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-17-222-04 · Note