CVE-2014-9209

Опубликовано: 31 мар. 2015

Источник: nvd

CVSS2: 6.9

EPSS Низкий

Описание

Untrusted search path vulnerability in the Clean Utility application in Rockwell Automation FactoryTalk Services Platform before 2.71.00 and FactoryTalk View Studio 8.00.00 and earlier allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.

Комментарий

CWE-426: Untrusted Search Path

Ссылки

https://ics-cert.us-cert.gov/advisories/ICSA-15-062-02
Third Party Advisory
US Government Resource
https://rockwellautomation.custhelp.com/app/answers/detail/a_id/646323
https://ics-cert.us-cert.gov/advisories/ICSA-15-062-02
Third Party Advisory
US Government Resource
https://rockwellautomation.custhelp.com/app/answers/detail/a_id/646323

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:rockwellautomation:factorytalk_services_platform:*:*:*:*:*:*:*:*

Версия до 2.70.00 (включая)

cpe:2.3:a:rockwellautomation:factorytalk_view_studio:*:*:*:*:*:*:*:*

Версия до 8.00.00 (включая)

EPSS

Процентиль: 0%

0.00003

Низкий

6.9 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-c55r-pfvh-5v9w

github

больше 3 лет назад