Описание
Invensys Wonderware InTouch 8.0 creates a NetDDE share with insecure permissions (Everyone/Full Control), which allows remote authenticated attackers, and possibly anonymous users, to execute arbitrary programs.
Ссылки
- Broken Link
- Broken Link
- Broken LinkVendor Advisory
- Not Applicable
- Third Party AdvisoryUS Government Resource
- Broken LinkThird Party AdvisoryVDB Entry
- Broken Link
- Broken Link
- Broken LinkVendor Advisory
- Not Applicable
- Third Party AdvisoryUS Government Resource
- Broken LinkThird Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:wonderware:intouch:8.0:*:*:*:*:*:*:*
EPSS
Процентиль: 87%
0.03193
Низкий
8.8 High
CVSS3
9 Critical
CVSS2
Дефекты
CWE-732
Связанные уязвимости
CVSS3: 8.8
github
почти 4 года назад
Invensys Wonderware InTouch 8.0 creates a NetDDE share with insecure permissions (Everyone/Full Control), which allows remote authenticated attackers, and possibly anonymous users, to execute arbitrary programs.
EPSS
Процентиль: 87%
0.03193
Низкий
8.8 High
CVSS3
9 Critical
CVSS2
Дефекты
CWE-732