CVE-2017-7972
N/A
N/A
Summary
A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the ability to escape out of remote PowerSCADA Anywhere applications and launch other processes.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Schneider Electric SE | PowerSCADA Anywhere | Version 1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 | affected |
| Schneider Electric SE | Citect Anywhere | version 1.0 | affected |
Weaknesses
- Escaping PowerSCADA Application
ADP Enrichment
CVE Program Container
Additional References
- http://www.securityfocus.com/bid/99913
- https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9071-security-notification-citect-anywhere
- http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/
References
- http://www.securityfocus.com/bid/99913
- https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9071-security-notification-citect-anywhere
- http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.