PT-2017-19314 · Schneider Electric · Clearscada

Published 2017-09-25 · Updated 2018-12-31 · CVE-2017-9962

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Schneider Electric's ClearSCADA versions prior to August 2017

Description The issue concerns a memory allocation vulnerability. Malformed requests can be sent to ClearSCADA client applications, causing unexpected behavior. The client applications affected include ViewX and the Server Icon.

Recommendations For versions prior to August 2017, update to a version released after August 2017 to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2017-9962

Affected Products

Clearscada

References · 3

• http://schneider-electric.com/en/download/document/SEVD-2017-264-01 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-9962 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-9962 · Security Note