CVE-2017-12711

Опубликовано: 30 авг. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 4.6

EPSS Низкий

Описание

An Incorrect Privilege Assignment issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A built-in user account has been granted a sensitive privilege that may allow a user to elevate to administrative privileges.

Ссылки

http://www.securityfocus.com/bid/100526
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/100526
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*

Версия до 8.2 (включая)

EPSS

Процентиль: 24%

0.0008

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-266

NVD-CWE-noinfo

Связанные уязвимости

GHSA-f93x-3rmr-5f55