CVE-2017-12694

Опубликовано: 25 авг. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

A Directory Traversal issue was discovered in SpiderControl SCADA Web Server. An attacker may be able to use a simple GET request to perform a directory traversal into system files.

Ссылки

http://www.securityfocus.com/bid/100456
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-234-03
Mitigation
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/100456
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-234-03
Mitigation
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:spidercontrol:scada_web_server:-:*:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.01167

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-75g2-f8v5-xc7g