CVE-2016-9345

Опубликовано: 13 фев. 2017

Источник: nvd

CVSS3: 6.8

CVSS2: 4.9

EPSS Низкий

Описание

An issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1, and DeltaV V13.3. Critical vulnerabilities may allow a local attacker to elevate privileges within the DeltaV control system.

Ссылки

http://www.securityfocus.com/bid/105767
http://www.securityfocus.com/bid/94584
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-16-334-02
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/105767
http://www.securityfocus.com/bid/94584
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-16-334-02
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:emerson:deltav:12.3:*:*:*:*:*:*:*

cpe:2.3:a:emerson:deltav:12.3.1:*:*:*:*:*:*:*

cpe:2.3:a:emerson:deltav:13.3:*:*:*:*:*:*:*

EPSS

Процентиль: 43%

0.00206

Низкий

6.8 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-5qgw-rx87-88x8