Описание
CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows remote attackers to execute arbitrary code via vectors related to creation of a file, loading a DLL, and process control.
Ссылки
- Patch
- US Government Resource
- Patch
- Patch
- US Government Resource
- Patch
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:indusoft:web_studio:6.1:*:*:*:*:*:*:*
cpe:2.3:a:indusoft:web_studio:7.0:*:*:*:*:*:*:*
EPSS
Процентиль: 99%
0.73429
Высокий
10 Critical
CVSS2
Дефекты
CWE-287
Связанные уязвимости
github
больше 3 лет назад
CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows remote attackers to execute arbitrary code via vectors related to creation of a file, loading a DLL, and process control.
EPSS
Процентиль: 99%
0.73429
Высокий
10 Critical
CVSS2
Дефекты
CWE-287