CVE-2017-16744

Опубликовано: 20 авг. 2018

Источник: nvd

CVSS3: 7.2

CVSS2: 6.5

EPSS Средний

Описание

A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microsoft Windows Systems can be exploited by leveraging valid platform (administrator) credentials.

Ссылки

http://www.securityfocus.com/bid/105101
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-191-03
Third Party Advisory
US Government Resource
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-19-022-01
http://www.securityfocus.com/bid/105101
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-191-03
Third Party Advisory
US Government Resource
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-19-022-01

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:tridium:niagara:*:*:*:*:*:*:*:*

Версия от 4.0 (включая) до 4.4 (включая)

cpe:2.3:a:tridium:niagara_ax_framework:*:*:*:*:*:*:*:*

Версия до 3.8 (включая)

EPSS

Процентиль: 95%

0.17183

Средний

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-3365-prfc-qrcq