CVE-2017-7972
Severity Score
5.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the ability to escape out of remote PowerSCADA Anywhere applications and launch other processes.
Existe una vulnerabilidad en la versión 1.0 de PowerSCADA Anywhere de Schneider Electric redistribuida con PowerSCADA Expert 8.1, PowerSCADA Expert 8.2 y Citect Anywhere 1.0 que permite escaparse de las aplicaciones remotas de PowerSCADA Anywhere y ejecutar otros procesos.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2017-04-19 CVE Reserved
- 2017-09-25 CVE Published
- 2023-04-21 EPSS Updated
- 2024-09-16 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/99913 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Schneider-electric Search vendor "Schneider-electric" | Powerscada Anywhere Search vendor "Schneider-electric" for product "Powerscada Anywhere" | 1.0 Search vendor "Schneider-electric" for product "Powerscada Anywhere" and version "1.0" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Powerscada Expert Search vendor "Schneider-electric" for product "Powerscada Expert" | 8.1 Search vendor "Schneider-electric" for product "Powerscada Expert" and version "8.1" | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Powerscada Anywhere Search vendor "Schneider-electric" for product "Powerscada Anywhere" | 1.0 Search vendor "Schneider-electric" for product "Powerscada Anywhere" and version "1.0" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Powerscada Expert Search vendor "Schneider-electric" for product "Powerscada Expert" | 8.2 Search vendor "Schneider-electric" for product "Powerscada Expert" and version "8.2" | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Citect Anywhere Search vendor "Schneider-electric" for product "Citect Anywhere" | 1.0 Search vendor "Schneider-electric" for product "Citect Anywhere" and version "1.0" | - |
Affected
| ||||||