CVE-2017-16721

Опубликовано: 04 дек. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

A Cross-site Scripting issue was discovered in Geovap Reliance SCADA Version 4.7.3 Update 2 and prior. This vulnerability could allow an unauthenticated attacker to inject arbitrary code.

Ссылки

http://www.securityfocus.com/bid/102031
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-334-02
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/102031
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-334-02
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:geovap:reliance-scada:*:*:*:*:*:*:*:*

Версия до 4.7.1 (включая)

cpe:2.3:a:geovap:reliance-scada:4.7.2:-:*:*:*:*:*:*

cpe:2.3:a:geovap:reliance-scada:4.7.2:update1:*:*:*:*:*:*

cpe:2.3:a:geovap:reliance-scada:4.7.2:update2:*:*:*:*:*:*

cpe:2.3:a:geovap:reliance-scada:4.7.3:-:*:*:*:*:*:*

cpe:2.3:a:geovap:reliance-scada:4.7.3:update1:*:*:*:*:*:*

cpe:2.3:a:geovap:reliance-scada:4.7.3:update2:*:*:*:*:*:*

EPSS

Процентиль: 54%

0.00313

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-94v7-5fr6-w7f8