CVE-2015-3940

Опубликовано: 04 авг. 2015

Источник: nvd

CVSS2: 6.9

EPSS Низкий

Описание

Untrusted search path vulnerability in Schneider Electric Wonderware System Platform before 2014 R2 Patch 01 allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.

Ссылки

http://iom.invensys.com/EN/pdfLibrary/Security_Bulletin_LFSEC00000106.pdf
Patch
Vendor Advisory
http://www.securityfocus.com/bid/75297
http://www.securitytracker.com/id/1033179
http://www.securitytracker.com/id/1033180
https://ics-cert.us-cert.gov/advisories/ICSA-15-169-02
Third Party Advisory
US Government Resource
http://iom.invensys.com/EN/pdfLibrary/Security_Bulletin_LFSEC00000106.pdf
Patch
Vendor Advisory
http://www.securityfocus.com/bid/75297
http://www.securitytracker.com/id/1033179
http://www.securitytracker.com/id/1033180
https://ics-cert.us-cert.gov/advisories/ICSA-15-169-02
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:schneider-electric:wonderware_system_platform_2014:r2:*:*:*:*:*:*:*

EPSS

Процентиль: 15%

0.00048

Низкий

6.9 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-q9pj-2vq4-w7fx

github

больше 3 лет назад