Vulnerabilites related to InduSoft - Web Studio
var-201112-0150
Vulnerability from variot
Stack-based buffer overflow in CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 allows remote attackers to execute arbitrary code via a crafted 0x15 (aka Remove File) operation for a file with a long name. Authentication is not required to exploit this vulnerability.The flaw exists within the CEServer component which is used as a runtime dependency for applications deployed using Indusoft WebStudio. When handling the Remove File operation (0x15) the process blindly copies user supplied data to a fixed-length buffer on the stack. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the browser. InduSoft Web Studio is a powerful and complete graphics control software that includes tools for developing Human Machine Interface (HMI), Management Control, Data Acquisition System (SCADA) and embedded control. This vulnerability exists in the CEServer component. Successful exploitation of the vulnerability can be applied. Failed attacks will likely cause denial-of-service conditions. InduSoft Web Studio 6.1 and 7.0 are vulnerable. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
ZDI-11-329 : InduSoft WebStudio CEServer Operation 0x15 Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-329 November 16, 2011
-
-- CVE ID: CVE-2011-4052
-
-- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C
-
-- Affected Vendors:
Indusoft
- -- Affected Products:
Indusoft WebStudio
-
-- TippingPoint(TM) IPS Customer Protection: TippingPoint IPS customers have been protected against this vulnerability by Digital Vaccine protection filter ID 11473.
-
-- Vendor Response:
Indusoft has issued an update to correct this vulnerability. More details can be found at:
http://www.indusoft.com/hotfixes/hotfixes.php
-
-- Disclosure Timeline: 2011-04-27 - Vulnerability reported to vendor 2011-11-16 - Coordinated public release of advisory
-
-- Credit: This vulnerability was discovered by:
-
Luigi Auriemma
-
-- About the Zero Day Initiative (ZDI): Established by TippingPoint, The Zero Day Initiative (ZDI) represents a best-of-breed model for rewarding security researchers for responsibly disclosing discovered vulnerabilities.
Researchers interested in getting paid for their security research through the ZDI can find more information and sign-up at:
http://www.zerodayinitiative.com
The ZDI is unique in how the acquired vulnerability information is used. Instead, upon notifying the affected product vendor, TippingPoint provides its customers with zero day protection through its intrusion prevention technology. Explicit details regarding the specifics of the vulnerability are not exposed to any parties until an official vendor patch is publicly available. Furthermore, with the altruistic aim of helping to secure a broader user base, TippingPoint provides this vulnerability information confidentially to security vendors (including competitors) who have a vulnerability protection or mitigation product.
Our vulnerability disclosure policy is available online at:
http://www.zerodayinitiative.com/advisories/disclosure_policy/
Follow the ZDI on Twitter:
http://twitter.com/thezdi
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.17 (MingW32)
iQEcBAEBAgAGBQJOw/OyAAoJEFVtgMGTo1sc2YUH+gP/cuGw73puMBaLm0tVCIYX 5/oLkfc95efUB/iDPiz6lwGpuXV7DhS38nDzjwI2StJYMFqqbox1PtBot1eLvXHO 0td+uYQu5IxqJON0GM5IzwUFofsC2NO/go8riPCjNkBlHdJrUoTejKmVqZMRNmB4 ytGkVuASAL6/yA19JXGlTvrf3npIOsWStuhRaOCyAXlQV2M4J8+3CXixTwmuPjeN bn2IUmW5aXYDpcUpHb7m4FTyH16TGHTt0DmqWgyW5q0pCRp23NKNPdEzBQtA+y2K Jj3ndSNFLENTWMgwGE5V+r5Lkn83YJ928dFSrSjYUHOH5sgxxgPZxgiPBFkj7os= =m2zu -----END PGP SIGNATURE-----
Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/ . ----------------------------------------------------------------------
Secunia is hiring!
Find your next job here:
http://secunia.com/company/jobs/
TITLE: InduSoft Web Studio CEServer Security Bypass and Buffer Overflow Vulnerabilities
SECUNIA ADVISORY ID: SA46871
VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/46871/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=46871
RELEASE DATE: 2011-11-16
DISCUSS ADVISORY: http://secunia.com/advisories/46871/#comments
AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s)
http://secunia.com/advisories/46871/
ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS
https://ca.secunia.com/?page=viewadvisory&vuln_id=46871
ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING
http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/
DESCRIPTION: A security issue and a vulnerability have been reported in InduSoft Web Studio, which can be exploited by malicious people to bypass certain security restrictions and compromise a vulnerable system.
1) An error within the remote agent component (CEServer.exe) when processing incoming requests can be exploited to bypass the authentication mechanism.
The security issue and the vulnerability are reported in versions prior to 7.0 Service Pack 1 Patch 1.
SOLUTION: Apply Service Pack 1 Patch 1.
PROVIDED AND/OR DISCOVERED BY: The vendor credits Luigi Auriemma via ZDI.
ORIGINAL ADVISORY: InduSoft: http://www.indusoft.com/hotfixes/hotfixes.php
ICS-CERT: http://www.us-cert.gov/control_systems/pdf/ICSA-11-319-01.pdf
OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/advisories/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201112-0150",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "web studio",
"scope": "eq",
"trust": 2.5,
"vendor": "indusoft",
"version": "6.1"
},
{
"model": "web studio",
"scope": "eq",
"trust": 2.5,
"vendor": "indusoft",
"version": "7.0"
},
{
"model": "indusoft web studio",
"scope": "eq",
"trust": 0.8,
"vendor": "schneider electric",
"version": "6.1"
},
{
"model": "indusoft web studio",
"scope": "eq",
"trust": 0.8,
"vendor": "schneider electric",
"version": "7.0"
},
{
"model": "webstudio",
"scope": null,
"trust": 0.7,
"vendor": "indusoft",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "web studio",
"version": "6.1"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "web studio",
"version": "7.0"
}
],
"sources": [
{
"db": "IVD",
"id": "59bc5fe4-2354-11e6-abef-000c29c66e3d"
},
{
"db": "ZDI",
"id": "ZDI-11-329"
},
{
"db": "CNVD",
"id": "CNVD-2011-4894"
},
{
"db": "BID",
"id": "50677"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003199"
},
{
"db": "CNNVD",
"id": "CNNVD-201111-304"
},
{
"db": "NVD",
"id": "CVE-2011-4052"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:schneider_electric:indusoft_web_studio",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2011-003199"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Luigi Auriemma through Zero Day Initiative.",
"sources": [
{
"db": "BID",
"id": "50677"
},
{
"db": "CNNVD",
"id": "CNNVD-201111-304"
}
],
"trust": 0.9
},
"cve": "CVE-2011-4052",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"id": "CVE-2011-4052",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "ZDI",
"availabilityImpact": "COMPLETE",
"baseScore": 9.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2011-4052",
"impactScore": 8.5,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "HIGH",
"trust": 0.7,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:C",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"id": "59bc5fe4-2354-11e6-abef-000c29c66e3d",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.9 [IVD]"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2011-4052",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2011-4052",
"trust": 0.8,
"value": "High"
},
{
"author": "ZDI",
"id": "CVE-2011-4052",
"trust": 0.7,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201111-304",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "IVD",
"id": "59bc5fe4-2354-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "CRITICAL"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "59bc5fe4-2354-11e6-abef-000c29c66e3d"
},
{
"db": "ZDI",
"id": "ZDI-11-329"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003199"
},
{
"db": "CNNVD",
"id": "CNNVD-201111-304"
},
{
"db": "NVD",
"id": "CVE-2011-4052"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Stack-based buffer overflow in CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 allows remote attackers to execute arbitrary code via a crafted 0x15 (aka Remove File) operation for a file with a long name. Authentication is not required to exploit this vulnerability.The flaw exists within the CEServer component which is used as a runtime dependency for applications deployed using Indusoft WebStudio. When handling the Remove File operation (0x15) the process blindly copies user supplied data to a fixed-length buffer on the stack. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the browser. InduSoft Web Studio is a powerful and complete graphics control software that includes tools for developing Human Machine Interface (HMI), Management Control, Data Acquisition System (SCADA) and embedded control. This vulnerability exists in the CEServer component. Successful exploitation of the vulnerability can be applied. Failed attacks will likely cause denial-of-service conditions. \nInduSoft Web Studio 6.1 and 7.0 are vulnerable. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\nZDI-11-329 : InduSoft WebStudio CEServer Operation 0x15 Remote Code\nExecution Vulnerability\nhttp://www.zerodayinitiative.com/advisories/ZDI-11-329\nNovember 16, 2011\n\n- -- CVE ID:\nCVE-2011-4052\n\n- -- CVSS:\n9, AV:N/AC:L/Au:N/C:P/I:P/A:C\n\n- -- Affected Vendors:\n\nIndusoft\n\n\n\n- -- Affected Products:\n\nIndusoft WebStudio\n\n\n\n- -- TippingPoint(TM) IPS Customer Protection:\nTippingPoint IPS customers have been protected against this\nvulnerability by Digital Vaccine protection filter ID 11473. \n\n- -- Vendor Response:\n\nIndusoft has issued an update to correct this vulnerability. More\ndetails can be found at:\n\nhttp://www.indusoft.com/hotfixes/hotfixes.php\n\n\n\n- -- Disclosure Timeline:\n2011-04-27 - Vulnerability reported to vendor\n2011-11-16 - Coordinated public release of advisory\n\n- -- Credit:\nThis vulnerability was discovered by:\n\n* Luigi Auriemma\n\n\n\n- -- About the Zero Day Initiative (ZDI):\nEstablished by TippingPoint, The Zero Day Initiative (ZDI) represents\na best-of-breed model for rewarding security researchers for responsibly\ndisclosing discovered vulnerabilities. \n\nResearchers interested in getting paid for their security research\nthrough the ZDI can find more information and sign-up at:\n\n http://www.zerodayinitiative.com\n\nThe ZDI is unique in how the acquired vulnerability information is\nused. Instead, upon notifying the affected product vendor,\nTippingPoint provides its customers with zero day protection through\nits intrusion prevention technology. Explicit details regarding the\nspecifics of the vulnerability are not exposed to any parties until\nan official vendor patch is publicly available. Furthermore, with the\naltruistic aim of helping to secure a broader user base, TippingPoint\nprovides this vulnerability information confidentially to security\nvendors (including competitors) who have a vulnerability protection or\nmitigation product. \n\nOur vulnerability disclosure policy is available online at:\n\n http://www.zerodayinitiative.com/advisories/disclosure_policy/\n\nFollow the ZDI on Twitter:\n\n http://twitter.com/thezdi\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v2.0.17 (MingW32)\n\niQEcBAEBAgAGBQJOw/OyAAoJEFVtgMGTo1sc2YUH+gP/cuGw73puMBaLm0tVCIYX\n5/oLkfc95efUB/iDPiz6lwGpuXV7DhS38nDzjwI2StJYMFqqbox1PtBot1eLvXHO\n0td+uYQu5IxqJON0GM5IzwUFofsC2NO/go8riPCjNkBlHdJrUoTejKmVqZMRNmB4\nytGkVuASAL6/yA19JXGlTvrf3npIOsWStuhRaOCyAXlQV2M4J8+3CXixTwmuPjeN\nbn2IUmW5aXYDpcUpHb7m4FTyH16TGHTt0DmqWgyW5q0pCRp23NKNPdEzBQtA+y2K\nJj3ndSNFLENTWMgwGE5V+r5Lkn83YJ928dFSrSjYUHOH5sgxxgPZxgiPBFkj7os=\n=m2zu\n-----END PGP SIGNATURE-----\n\n_______________________________________________\nFull-Disclosure - We believe in it. \nCharter: http://lists.grok.org.uk/full-disclosure-charter.html\nHosted and sponsored by Secunia - http://secunia.com/\n. ----------------------------------------------------------------------\n\nSecunia is hiring!\n\nFind your next job here:\n\nhttp://secunia.com/company/jobs/\n\n----------------------------------------------------------------------\n\nTITLE:\nInduSoft Web Studio CEServer Security Bypass and Buffer Overflow\nVulnerabilities\n\nSECUNIA ADVISORY ID:\nSA46871\n\nVERIFY ADVISORY:\nSecunia.com\nhttp://secunia.com/advisories/46871/\nCustomer Area (Credentials Required)\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=46871\n\nRELEASE DATE:\n2011-11-16\n\nDISCUSS ADVISORY:\nhttp://secunia.com/advisories/46871/#comments\n\nAVAILABLE ON SITE AND IN CUSTOMER AREA:\n * Last Update\n * Popularity\n * Comments\n * Criticality Level\n * Impact\n * Where\n * Solution Status\n * Operating System / Software\n * CVE Reference(s)\n\nhttp://secunia.com/advisories/46871/\n\nONLY AVAILABLE IN CUSTOMER AREA:\n * Authentication Level\n * Report Reliability\n * Secunia PoC\n * Secunia Analysis\n * Systems Affected\n * Approve Distribution\n * Remediation Status\n * Secunia CVSS Score\n * CVSS\n\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=46871\n\nONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI:\n * AUTOMATED SCANNING\n\nhttp://secunia.com/vulnerability_scanning/personal/\nhttp://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/\n\nDESCRIPTION:\nA security issue and a vulnerability have been reported in InduSoft\nWeb Studio, which can be exploited by malicious people to bypass\ncertain security restrictions and compromise a vulnerable system. \n\n1) An error within the remote agent component (CEServer.exe) when\nprocessing incoming requests can be exploited to bypass the\nauthentication mechanism. \n\nThe security issue and the vulnerability are reported in versions\nprior to 7.0 Service Pack 1 Patch 1. \n\nSOLUTION:\nApply Service Pack 1 Patch 1. \n\nPROVIDED AND/OR DISCOVERED BY:\nThe vendor credits Luigi Auriemma via ZDI. \n\nORIGINAL ADVISORY:\nInduSoft:\nhttp://www.indusoft.com/hotfixes/hotfixes.php\n\nICS-CERT:\nhttp://www.us-cert.gov/control_systems/pdf/ICSA-11-319-01.pdf\n\nOTHER REFERENCES:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nDEEP LINKS:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXTENDED DESCRIPTION:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXTENDED SOLUTION:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXPLOIT:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\nprivate users keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2011-4052"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003199"
},
{
"db": "ZDI",
"id": "ZDI-11-329"
},
{
"db": "CNVD",
"id": "CNVD-2011-4894"
},
{
"db": "BID",
"id": "50677"
},
{
"db": "IVD",
"id": "59bc5fe4-2354-11e6-abef-000c29c66e3d"
},
{
"db": "PACKETSTORM",
"id": "107058"
},
{
"db": "PACKETSTORM",
"id": "107047"
},
{
"db": "PACKETSTORM",
"id": "107059"
}
],
"trust": 3.51
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2011-4052",
"trust": 4.3
},
{
"db": "ICS CERT",
"id": "ICSA-11-319-01",
"trust": 3.5
},
{
"db": "ZDI",
"id": "ZDI-11-329",
"trust": 2.4
},
{
"db": "BID",
"id": "50677",
"trust": 0.9
},
{
"db": "CNVD",
"id": "CNVD-2011-4894",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201111-304",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003199",
"trust": 0.8
},
{
"db": "SECUNIA",
"id": "46875",
"trust": 0.8
},
{
"db": "SECUNIA",
"id": "46871",
"trust": 0.8
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-1183",
"trust": 0.7
},
{
"db": "NSFOCUS",
"id": "18189",
"trust": 0.6
},
{
"db": "IVD",
"id": "59BC5FE4-2354-11E6-ABEF-000C29C66E3D",
"trust": 0.2
},
{
"db": "PACKETSTORM",
"id": "107058",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "107047",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "107059",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "59bc5fe4-2354-11e6-abef-000c29c66e3d"
},
{
"db": "ZDI",
"id": "ZDI-11-329"
},
{
"db": "CNVD",
"id": "CNVD-2011-4894"
},
{
"db": "BID",
"id": "50677"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003199"
},
{
"db": "PACKETSTORM",
"id": "107058"
},
{
"db": "PACKETSTORM",
"id": "107047"
},
{
"db": "PACKETSTORM",
"id": "107059"
},
{
"db": "CNNVD",
"id": "CNNVD-201111-304"
},
{
"db": "NVD",
"id": "CVE-2011-4052"
}
]
},
"id": "VAR-201112-0150",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "59bc5fe4-2354-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2011-4894"
}
],
"trust": 1.3889377500000002
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "59bc5fe4-2354-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2011-4894"
}
]
},
"last_update_date": "2024-11-23T23:06:27.654000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Security Updates and Hotfixes",
"trust": 0.8,
"url": "http://www.indusoft.com/Login?returnurl=%2fProducts-Downloads%2fSecurity-Hotfix-Updates"
},
{
"title": "Distributors",
"trust": 0.8,
"url": "http://www.indusoft.com/Partners/Distributors/International-Distributors?_id=86\u0026country=Japan\u0026abb=jp"
},
{
"title": "Download Products and Documents",
"trust": 0.8,
"url": "http://www.indusoft.com/Products-Downloads/HMI-SCADA-Software/InduSoft-Web-Studio?string=\u0026name=IWS%2fwebstudio"
},
{
"title": "Indusoft has issued an update to correct this vulnerability.",
"trust": 0.7,
"url": "http://www.indusoft.com/hotfixes/hotfixes.php"
},
{
"title": "Patch for InduSoft Web Studio \u0027CEServer\u0027 Component Stack Buffer Overflow Vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/5917"
},
{
"title": "IWS70.1.1only",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=41939"
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-11-329"
},
{
"db": "CNVD",
"id": "CNVD-2011-4894"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003199"
},
{
"db": "CNNVD",
"id": "CNNVD-201111-304"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-119",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2011-003199"
},
{
"db": "NVD",
"id": "CVE-2011-4052"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.5,
"url": "http://www.us-cert.gov/control_systems/pdf/icsa-11-319-01.pdf"
},
{
"trust": 2.9,
"url": "http://www.indusoft.com/hotfixes/hotfixes.php"
},
{
"trust": 1.6,
"url": "http://www.zerodayinitiative.com/advisories/zdi-11-329/"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-4052"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-4052"
},
{
"trust": 0.6,
"url": "http://secunia.com/advisories/46871"
},
{
"trust": 0.6,
"url": "http://secunia.com/advisories/46875"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/bid/50677"
},
{
"trust": 0.6,
"url": "http://www.nsfocus.net/vulndb/18189"
},
{
"trust": 0.3,
"url": "http://www.indusoft.com/mainpage.php?aricleid=17\u0026type=certified/hardware"
},
{
"trust": 0.2,
"url": "http://secunia.com/company/jobs/"
},
{
"trust": 0.2,
"url": "http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/"
},
{
"trust": 0.2,
"url": "http://secunia.com/vulnerability_intelligence/"
},
{
"trust": 0.2,
"url": "http://secunia.com/advisories/secunia_security_advisories/"
},
{
"trust": 0.2,
"url": "http://secunia.com/vulnerability_scanning/personal/"
},
{
"trust": 0.2,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.2,
"url": "http://secunia.com/advisories/about_secunia_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/46875/#comments"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/46875/"
},
{
"trust": 0.1,
"url": "https://ca.secunia.com/?page=viewadvisory\u0026vuln_id=46875"
},
{
"trust": 0.1,
"url": "http://www.zerodayinitiative.com/advisories/disclosure_policy/"
},
{
"trust": 0.1,
"url": "http://www.zerodayinitiative.com/advisories/zdi-11-329"
},
{
"trust": 0.1,
"url": "http://secunia.com/"
},
{
"trust": 0.1,
"url": "http://twitter.com/thezdi"
},
{
"trust": 0.1,
"url": "http://www.tippingpoint.com"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-4052"
},
{
"trust": 0.1,
"url": "http://www.zerodayinitiative.com"
},
{
"trust": 0.1,
"url": "http://lists.grok.org.uk/full-disclosure-charter.html"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/46871/#comments"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/46871/"
},
{
"trust": 0.1,
"url": "https://ca.secunia.com/?page=viewadvisory\u0026vuln_id=46871"
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-11-329"
},
{
"db": "CNVD",
"id": "CNVD-2011-4894"
},
{
"db": "BID",
"id": "50677"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003199"
},
{
"db": "PACKETSTORM",
"id": "107058"
},
{
"db": "PACKETSTORM",
"id": "107047"
},
{
"db": "PACKETSTORM",
"id": "107059"
},
{
"db": "CNNVD",
"id": "CNNVD-201111-304"
},
{
"db": "NVD",
"id": "CVE-2011-4052"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "59bc5fe4-2354-11e6-abef-000c29c66e3d"
},
{
"db": "ZDI",
"id": "ZDI-11-329"
},
{
"db": "CNVD",
"id": "CNVD-2011-4894"
},
{
"db": "BID",
"id": "50677"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003199"
},
{
"db": "PACKETSTORM",
"id": "107058"
},
{
"db": "PACKETSTORM",
"id": "107047"
},
{
"db": "PACKETSTORM",
"id": "107059"
},
{
"db": "CNNVD",
"id": "CNNVD-201111-304"
},
{
"db": "NVD",
"id": "CVE-2011-4052"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2011-11-16T00:00:00",
"db": "IVD",
"id": "59bc5fe4-2354-11e6-abef-000c29c66e3d"
},
{
"date": "2011-11-16T00:00:00",
"db": "ZDI",
"id": "ZDI-11-329"
},
{
"date": "2011-11-16T00:00:00",
"db": "CNVD",
"id": "CNVD-2011-4894"
},
{
"date": "2011-11-15T00:00:00",
"db": "BID",
"id": "50677"
},
{
"date": "2011-12-06T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2011-003199"
},
{
"date": "2011-11-16T09:29:22",
"db": "PACKETSTORM",
"id": "107058"
},
{
"date": "2011-11-17T02:26:50",
"db": "PACKETSTORM",
"id": "107047"
},
{
"date": "2011-11-16T09:29:25",
"db": "PACKETSTORM",
"id": "107059"
},
{
"date": "1900-01-01T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201111-304"
},
{
"date": "2011-12-05T11:55:06.867000",
"db": "NVD",
"id": "CVE-2011-4052"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2011-11-16T00:00:00",
"db": "ZDI",
"id": "ZDI-11-329"
},
{
"date": "2011-11-16T00:00:00",
"db": "CNVD",
"id": "CNVD-2011-4894"
},
{
"date": "2011-11-16T20:05:00",
"db": "BID",
"id": "50677"
},
{
"date": "2012-02-03T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2011-003199"
},
{
"date": "2011-12-12T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201111-304"
},
{
"date": "2024-11-21T01:31:45.807000",
"db": "NVD",
"id": "CVE-2011-4052"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "PACKETSTORM",
"id": "107047"
},
{
"db": "CNNVD",
"id": "CNNVD-201111-304"
}
],
"trust": 0.7
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "InduSoft Web Studio \u0027CEServer\u0027 Component Stack Buffer Overflow Vulnerability",
"sources": [
{
"db": "IVD",
"id": "59bc5fe4-2354-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2011-4894"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Buffer overflow",
"sources": [
{
"db": "IVD",
"id": "59bc5fe4-2354-11e6-abef-000c29c66e3d"
},
{
"db": "CNNVD",
"id": "CNNVD-201111-304"
}
],
"trust": 0.8
}
}
var-201105-0111
Vulnerability from variot
Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 6.1 and 7.x before 7.0+Patch 1 allows remote attackers to execute arbitrary code via an invalid request. Indusoft Web Studio is a powerful graphics control software. A remote attacker can exploit the vulnerability to view system file information in the application context. InduSoft Web Studio is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Information harvested may aid in launching further attacks
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201105-0111",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "web studio",
"scope": "eq",
"trust": 2.5,
"vendor": "indusoft",
"version": "6.1"
},
{
"model": "web studio",
"scope": "eq",
"trust": 2.5,
"vendor": "indusoft",
"version": "7.0"
},
{
"model": "indusoft web studio",
"scope": "eq",
"trust": 0.8,
"vendor": "schneider electric",
"version": "6.1 and 7.0"
},
{
"model": "web studio",
"scope": "ne",
"trust": 0.3,
"vendor": "indusoft",
"version": "7.0.104"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "web studio",
"version": "6.1"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "web studio",
"version": "7.0"
}
],
"sources": [
{
"db": "IVD",
"id": "02c7c484-2355-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2011-1873"
},
{
"db": "BID",
"id": "47842"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004589"
},
{
"db": "CNNVD",
"id": "CNNVD-201105-059"
},
{
"db": "NVD",
"id": "CVE-2011-1900"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:schneider_electric:indusoft_web_studio",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2011-004589"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Indusoft",
"sources": [
{
"db": "BID",
"id": "47842"
}
],
"trust": 0.3
},
"cve": "CVE-2011-1900",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CVE-2011-1900",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "02c7c484-2355-11e6-abef-000c29c66e3d",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.9 [IVD]"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2011-1900",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2011-1900",
"trust": 0.8,
"value": "High"
},
{
"author": "CNNVD",
"id": "CNNVD-201105-059",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "IVD",
"id": "02c7c484-2355-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "CRITICAL"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "02c7c484-2355-11e6-abef-000c29c66e3d"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004589"
},
{
"db": "CNNVD",
"id": "CNNVD-201105-059"
},
{
"db": "NVD",
"id": "CVE-2011-1900"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 6.1 and 7.x before 7.0+Patch 1 allows remote attackers to execute arbitrary code via an invalid request. Indusoft Web Studio is a powerful graphics control software. A remote attacker can exploit the vulnerability to view system file information in the application context. InduSoft Web Studio is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Information harvested may aid in launching further attacks",
"sources": [
{
"db": "NVD",
"id": "CVE-2011-1900"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004589"
},
{
"db": "CNVD",
"id": "CNVD-2011-1873"
},
{
"db": "BID",
"id": "47842"
},
{
"db": "IVD",
"id": "02c7c484-2355-11e6-abef-000c29c66e3d"
}
],
"trust": 2.61
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2011-1900",
"trust": 3.5
},
{
"db": "CNVD",
"id": "CNVD-2011-1873",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201105-059",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004589",
"trust": 0.8
},
{
"db": "NSFOCUS",
"id": "21045",
"trust": 0.6
},
{
"db": "BID",
"id": "47842",
"trust": 0.3
},
{
"db": "IVD",
"id": "02C7C484-2355-11E6-ABEF-000C29C66E3D",
"trust": 0.2
}
],
"sources": [
{
"db": "IVD",
"id": "02c7c484-2355-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2011-1873"
},
{
"db": "BID",
"id": "47842"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004589"
},
{
"db": "CNNVD",
"id": "CNNVD-201105-059"
},
{
"db": "NVD",
"id": "CVE-2011-1900"
}
]
},
"id": "VAR-201105-0111",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "02c7c484-2355-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2011-1873"
}
],
"trust": 1.3889377500000002
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "02c7c484-2355-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2011-1873"
}
]
},
"last_update_date": "2024-11-23T22:02:52.390000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Security Updates and Hotfixes",
"trust": 0.8,
"url": "http://www.indusoft.com/Login?returnurl=%2fProducts-Downloads%2fSecurity-Hotfix-Updates"
},
{
"title": "InduSoft Web Studio Directory Traversal Vulnerability Patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/3873"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2011-1873"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004589"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-22",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2011-004589"
},
{
"db": "NVD",
"id": "CVE-2011-1900"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.5,
"url": "http://www.indusoft.com/hotfixes/hotfixes.php"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-1900"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-1900"
},
{
"trust": 0.6,
"url": "http://www.nsfocus.net/vulndb/21045"
},
{
"trust": 0.3,
"url": "http://www.indusoft.com/"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2011-1873"
},
{
"db": "BID",
"id": "47842"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004589"
},
{
"db": "CNNVD",
"id": "CNNVD-201105-059"
},
{
"db": "NVD",
"id": "CVE-2011-1900"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "02c7c484-2355-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2011-1873"
},
{
"db": "BID",
"id": "47842"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004589"
},
{
"db": "CNNVD",
"id": "CNNVD-201105-059"
},
{
"db": "NVD",
"id": "CVE-2011-1900"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2011-05-16T00:00:00",
"db": "IVD",
"id": "02c7c484-2355-11e6-abef-000c29c66e3d"
},
{
"date": "2011-05-16T00:00:00",
"db": "CNVD",
"id": "CNVD-2011-1873"
},
{
"date": "2011-05-12T00:00:00",
"db": "BID",
"id": "47842"
},
{
"date": "2012-03-27T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2011-004589"
},
{
"date": "2011-05-05T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201105-059"
},
{
"date": "2011-05-04T22:55:03.687000",
"db": "NVD",
"id": "CVE-2011-1900"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2011-05-16T00:00:00",
"db": "CNVD",
"id": "CNVD-2011-1873"
},
{
"date": "2011-05-12T00:00:00",
"db": "BID",
"id": "47842"
},
{
"date": "2012-03-27T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2011-004589"
},
{
"date": "2011-05-06T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201105-059"
},
{
"date": "2024-11-21T01:27:16.640000",
"db": "NVD",
"id": "CVE-2011-1900"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201105-059"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "InduSoft Web Studio Directory Traversal Vulnerability",
"sources": [
{
"db": "IVD",
"id": "02c7c484-2355-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2011-1873"
},
{
"db": "BID",
"id": "47842"
}
],
"trust": 1.1
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Path traversal",
"sources": [
{
"db": "IVD",
"id": "02c7c484-2355-11e6-abef-000c29c66e3d"
},
{
"db": "CNNVD",
"id": "CNNVD-201105-059"
}
],
"trust": 0.8
}
}
var-201509-0265
Vulnerability from variot
Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code or cause a denial of service (unhandled runtime exception and application crash) via a crafted Indusoft Project file. Schneider Electric InduSoft Web Studio is an embedded HMI software package. The Remote Agent is one of the remote agent components
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201509-0265",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "web studio",
"scope": "lte",
"trust": 1.0,
"vendor": "indusoft",
"version": "7.1.3.6"
},
{
"model": "indusoft web studio",
"scope": "lt",
"trust": 0.8,
"vendor": "schneider electric",
"version": "8.0"
},
{
"model": "electric indusoft web studio",
"scope": "lt",
"trust": 0.6,
"vendor": "schneider",
"version": "8.0"
},
{
"model": "web studio",
"scope": "eq",
"trust": 0.6,
"vendor": "indusoft",
"version": "7.1.3.6"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "web studio",
"version": "*"
}
],
"sources": [
{
"db": "IVD",
"id": "728b4d8a-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2015-06464"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-004974"
},
{
"db": "CNNVD",
"id": "CNNVD-201509-549"
},
{
"db": "NVD",
"id": "CVE-2015-7375"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:schneider_electric:indusoft_web_studio",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2015-004974"
}
]
},
"cve": "CVE-2015-7375",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2015-7375",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2015-06464",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "728b4d8a-2351-11e6-abef-000c29c66e3d",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.9 [IVD]"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2015-7375",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2015-7375",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2015-06464",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201509-549",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "IVD",
"id": "728b4d8a-2351-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "728b4d8a-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2015-06464"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-004974"
},
{
"db": "CNNVD",
"id": "CNNVD-201509-549"
},
{
"db": "NVD",
"id": "CVE-2015-7375"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code or cause a denial of service (unhandled runtime exception and application crash) via a crafted Indusoft Project file. Schneider Electric InduSoft Web Studio is an embedded HMI software package. The Remote Agent is one of the remote agent components",
"sources": [
{
"db": "NVD",
"id": "CVE-2015-7375"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-004974"
},
{
"db": "CNVD",
"id": "CNVD-2015-06464"
},
{
"db": "IVD",
"id": "728b4d8a-2351-11e6-abef-000c29c66e3d"
}
],
"trust": 2.34
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2015-7375",
"trust": 3.2
},
{
"db": "SCHNEIDER",
"id": "SEVD-2015-251-01",
"trust": 2.2
},
{
"db": "CNVD",
"id": "CNVD-2015-06464",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201509-549",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2015-004974",
"trust": 0.8
},
{
"db": "IVD",
"id": "728B4D8A-2351-11E6-ABEF-000C29C66E3D",
"trust": 0.2
}
],
"sources": [
{
"db": "IVD",
"id": "728b4d8a-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2015-06464"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-004974"
},
{
"db": "CNNVD",
"id": "CNNVD-201509-549"
},
{
"db": "NVD",
"id": "CVE-2015-7375"
}
]
},
"id": "VAR-201509-0265",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "728b4d8a-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2015-06464"
}
],
"trust": 1.5259585
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "728b4d8a-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2015-06464"
}
]
},
"last_update_date": "2024-11-23T21:43:56.273000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "SEVD-2015-251-01",
"trust": 0.8,
"url": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-251-01"
},
{
"title": "Patch for Schneider Electric InduSoft Web Studio arbitrary code execution vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/65019"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-06464"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-004974"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-20",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2015-004974"
},
{
"db": "NVD",
"id": "CVE-2015-7375"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.2,
"url": "http://download.schneider-electric.com/files?p_doc_ref=sevd-2015-251-01"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7375"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-7375"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-06464"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-004974"
},
{
"db": "CNNVD",
"id": "CNNVD-201509-549"
},
{
"db": "NVD",
"id": "CVE-2015-7375"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "728b4d8a-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2015-06464"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-004974"
},
{
"db": "CNNVD",
"id": "CNNVD-201509-549"
},
{
"db": "NVD",
"id": "CVE-2015-7375"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2015-10-13T00:00:00",
"db": "IVD",
"id": "728b4d8a-2351-11e6-abef-000c29c66e3d"
},
{
"date": "2015-10-13T00:00:00",
"db": "CNVD",
"id": "CNVD-2015-06464"
},
{
"date": "2015-09-30T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-004974"
},
{
"date": "2015-09-29T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201509-549"
},
{
"date": "2015-09-25T14:59:01.837000",
"db": "NVD",
"id": "CVE-2015-7375"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2015-10-13T00:00:00",
"db": "CNVD",
"id": "CNVD-2015-06464"
},
{
"date": "2015-09-30T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-004974"
},
{
"date": "2015-09-29T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201509-549"
},
{
"date": "2024-11-21T02:36:40.970000",
"db": "NVD",
"id": "CVE-2015-7375"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201509-549"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Schneider Electric InduSoft Web Studio Arbitrary code execution vulnerability",
"sources": [
{
"db": "IVD",
"id": "728b4d8a-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2015-06464"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Input validation",
"sources": [
{
"db": "IVD",
"id": "728b4d8a-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNNVD",
"id": "CNNVD-201509-549"
}
],
"trust": 0.8
}
}
var-201303-0298
Vulnerability from variot
Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remote attackers to read arbitrary files via a full pathname in an argument to the sub_401A90 CreateFileW function. Advantech Studio (AStudio) is an automated software tool that contains all the basic components for data acquisition and control. Advantech Studio has a directory traversal vulnerability. Advantech Studio and Indusoft Web Studio are prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Versions Advantech Studio/Indusoft Web Studio 7.0 and prior are vulnerable. The tool supports real-time dynamic graphic images, uses a browser to view trends, alarms, reports, imports or exports reports and real-time data in XML format, etc
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201303-0298",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "web studio",
"scope": "eq",
"trust": 1.9,
"vendor": "indusoft",
"version": "7.0"
},
{
"model": "web studio",
"scope": "eq",
"trust": 1.6,
"vendor": "indusoft",
"version": "7.0b2"
},
{
"model": "web studio",
"scope": "eq",
"trust": 1.6,
"vendor": "indusoft",
"version": "6.1"
},
{
"model": "studio",
"scope": "eq",
"trust": 1.0,
"vendor": "advantech",
"version": "6.1"
},
{
"model": "studio",
"scope": "eq",
"trust": 0.9,
"vendor": "advantech",
"version": "7.0"
},
{
"model": "indusoft web studio",
"scope": "lte",
"trust": 0.8,
"vendor": "schneider electric",
"version": "7.0"
},
{
"model": "studio",
"scope": "lte",
"trust": 0.8,
"vendor": "advantech",
"version": "7.0"
},
{
"model": null,
"scope": "eq",
"trust": 0.4,
"vendor": "advantech studio",
"version": "6.1"
},
{
"model": null,
"scope": "eq",
"trust": 0.4,
"vendor": "web studio",
"version": "6.1"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "web studio",
"version": "7.0"
},
{
"model": "7.0b2",
"scope": null,
"trust": 0.2,
"vendor": "web studio",
"version": null
}
],
"sources": [
{
"db": "IVD",
"id": "0e010790-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2012-7470"
},
{
"db": "BID",
"id": "56871"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-001864"
},
{
"db": "CNNVD",
"id": "CNNVD-201212-141"
},
{
"db": "NVD",
"id": "CVE-2013-1627"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:schneider_electric:indusoft_web_studio",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:advantech:advantech_studio",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-001864"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Nin3",
"sources": [
{
"db": "BID",
"id": "56871"
},
{
"db": "CNNVD",
"id": "CNNVD-201212-141"
}
],
"trust": 0.9
},
"cve": "CVE-2013-1627",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 7.8,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CVE-2013-1627",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "NONE",
"baseScore": 7.8,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "0e010790-2353-11e6-abef-000c29c66e3d",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 7.8,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "VHN-61629",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:C/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2013-1627",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2013-1627",
"trust": 0.8,
"value": "High"
},
{
"author": "CNNVD",
"id": "CNNVD-201212-141",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "IVD",
"id": "0e010790-2353-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-61629",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "0e010790-2353-11e6-abef-000c29c66e3d"
},
{
"db": "VULHUB",
"id": "VHN-61629"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-001864"
},
{
"db": "CNNVD",
"id": "CNNVD-201212-141"
},
{
"db": "NVD",
"id": "CVE-2013-1627"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remote attackers to read arbitrary files via a full pathname in an argument to the sub_401A90 CreateFileW function. Advantech Studio (AStudio) is an automated software tool that contains all the basic components for data acquisition and control. Advantech Studio has a directory traversal vulnerability. Advantech Studio and Indusoft Web Studio are prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. \nVersions Advantech Studio/Indusoft Web Studio 7.0 and prior are vulnerable. The tool supports real-time dynamic graphic images, uses a browser to view trends, alarms, reports, imports or exports reports and real-time data in XML format, etc",
"sources": [
{
"db": "NVD",
"id": "CVE-2013-1627"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-001864"
},
{
"db": "CNVD",
"id": "CNVD-2012-7470"
},
{
"db": "BID",
"id": "56871"
},
{
"db": "IVD",
"id": "0e010790-2353-11e6-abef-000c29c66e3d"
},
{
"db": "VULHUB",
"id": "VHN-61629"
}
],
"trust": 2.7
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-61629",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-61629"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2013-1627",
"trust": 3.0
},
{
"db": "ICS CERT",
"id": "ICSA-13-067-01",
"trust": 2.8
},
{
"db": "BID",
"id": "56871",
"trust": 1.6
},
{
"db": "CNNVD",
"id": "CNNVD-201212-141",
"trust": 0.9
},
{
"db": "JVNDB",
"id": "JVNDB-2013-001864",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2012-7470",
"trust": 0.6
},
{
"db": "ICS CERT ALERT",
"id": "ICS-ALERT-13-004-01",
"trust": 0.3
},
{
"db": "IVD",
"id": "0E010790-2353-11E6-ABEF-000C29C66E3D",
"trust": 0.2
},
{
"db": "SEEBUG",
"id": "SSVID-76910",
"trust": 0.1
},
{
"db": "EXPLOIT-DB",
"id": "23132",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-61629",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "0e010790-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2012-7470"
},
{
"db": "VULHUB",
"id": "VHN-61629"
},
{
"db": "BID",
"id": "56871"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-001864"
},
{
"db": "CNNVD",
"id": "CNNVD-201212-141"
},
{
"db": "NVD",
"id": "CVE-2013-1627"
}
]
},
"id": "VAR-201303-0298",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "0e010790-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2012-7470"
},
{
"db": "VULHUB",
"id": "VHN-61629"
}
],
"trust": 1.4778103666666667
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "0e010790-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2012-7470"
}
]
},
"last_update_date": "2024-11-23T22:18:46.164000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "http://www.advantech.com/default.aspx"
},
{
"title": "InduSoft",
"trust": 0.8,
"url": "http://www.indusoft.com/"
},
{
"title": "\u30d1\u30fc\u30c8\u30ca\u30fc\u60c5\u5831",
"trust": 0.8,
"url": "http://www.advantech.co.jp/support-AJP/distributors.asp"
},
{
"title": "Advantech\u30a2\u30c9\u30d0\u30f3\u30c6\u30c3\u30af\u682a\u5f0f\u4f1a\u793e",
"trust": 0.8,
"url": "http://www.advantech.co.jp/"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-001864"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-22",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-61629"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-001864"
},
{
"db": "NVD",
"id": "CVE-2013-1627"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.8,
"url": "http://ics-cert.us-cert.gov/pdf/icsa-13-067-01.pdf"
},
{
"trust": 1.2,
"url": "http://www.securityfocus.com/bid/56871"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-1627"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-1627"
},
{
"trust": 0.3,
"url": "http://www.advantech.com/products/advantech-studio/mod_3d1b45b0-b0af-405c-a9cc-a27b35774634.aspx"
},
{
"trust": 0.3,
"url": "http://www.indusoft.com/indusoftart.php?catid=1\u0026name=iws/webstudio"
},
{
"trust": 0.3,
"url": "http://www.us-cert.gov/control_systems/pdf/ics-alert-13-004-01.pdf"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2012-7470"
},
{
"db": "VULHUB",
"id": "VHN-61629"
},
{
"db": "BID",
"id": "56871"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-001864"
},
{
"db": "CNNVD",
"id": "CNNVD-201212-141"
},
{
"db": "NVD",
"id": "CVE-2013-1627"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "0e010790-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2012-7470"
},
{
"db": "VULHUB",
"id": "VHN-61629"
},
{
"db": "BID",
"id": "56871"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-001864"
},
{
"db": "CNNVD",
"id": "CNNVD-201212-141"
},
{
"db": "NVD",
"id": "CVE-2013-1627"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2012-12-12T00:00:00",
"db": "IVD",
"id": "0e010790-2353-11e6-abef-000c29c66e3d"
},
{
"date": "2012-12-17T00:00:00",
"db": "CNVD",
"id": "CNVD-2012-7470"
},
{
"date": "2013-03-11T00:00:00",
"db": "VULHUB",
"id": "VHN-61629"
},
{
"date": "2012-12-04T00:00:00",
"db": "BID",
"id": "56871"
},
{
"date": "2013-03-19T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-001864"
},
{
"date": "2012-12-12T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201212-141"
},
{
"date": "2013-03-11T17:55:01.810000",
"db": "NVD",
"id": "CVE-2013-1627"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2012-12-17T00:00:00",
"db": "CNVD",
"id": "CNVD-2012-7470"
},
{
"date": "2013-03-18T00:00:00",
"db": "VULHUB",
"id": "VHN-61629"
},
{
"date": "2013-03-08T18:24:00",
"db": "BID",
"id": "56871"
},
{
"date": "2013-03-19T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-001864"
},
{
"date": "2013-03-11T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201212-141"
},
{
"date": "2024-11-21T01:50:01.667000",
"db": "NVD",
"id": "CVE-2013-1627"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201212-141"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Indusoft Studio and Advantech Studio Vulnerable to absolute path traversal",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-001864"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Path traversal",
"sources": [
{
"db": "IVD",
"id": "0e010790-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNNVD",
"id": "CNNVD-201212-141"
}
],
"trust": 0.8
}
}
var-201101-0383
Vulnerability from variot
Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advantech Studio 6.1 and InduSoft Web Studio 7.0, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long request to TCP port 80. Advantech Studio Test Web Server Contains a buffer overflow vulnerability. Indusoft is a powerful interpersonal interface graphical design software (SCADA) developed by indusoft. InduSoft NTWebServer runs the test WEB service on TCP port 80. Successful exploitation of the vulnerability can be performed in the context of the service process. Code. InduSoft NTWebServer is prone to a stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code in the context of the affected server. Successful attacks will compromise the server and possibly the underlying computer. Failed attacks will likely cause denial-of-service conditions.
SOLUTION: Apply patch. ----------------------------------------------------------------------
Secure your corporate defenses and reduce complexity in handling vulnerability threats with the new Secunia Vulnerability Intelligence Manager (VIM).
Request a free trial: http://secunia.com/products/corporate/vim/
TITLE: InduSoft Web Studio NTWebServer Buffer Overflow Vulnerability
SECUNIA ADVISORY ID: SA42883
VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/42883/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=42883
RELEASE DATE: 2011-01-13
DISCUSS ADVISORY: http://secunia.com/advisories/42883/#comments
AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s)
http://secunia.com/advisories/42883/
ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS
https://ca.secunia.com/?page=viewadvisory&vuln_id=42883
ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING
http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/
DESCRIPTION: A vulnerability has been reported in InduSoft Web Studio, which can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is reported in version 7.0. Other versions may also be affected.
SOLUTION: Restrict access to trusted hosts only. Use a different web server.
PROVIDED AND/OR DISCOVERED BY: US-CERT credits Jeremy Brown.
ORIGINAL ADVISORY: InduSoft: http://www.indusoft.com/blog/?p=337
OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/
DEEP LINKS: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/
EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/
EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/
EXPLOIT: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/
About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/advisories/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201101-0383",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "web studio",
"scope": "eq",
"trust": 1.6,
"vendor": "indusoft",
"version": "7.0"
},
{
"model": "studio",
"scope": "eq",
"trust": 1.0,
"vendor": "advantech",
"version": "6.1"
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "advantech",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "indusoft",
"version": null
},
{
"model": "studio",
"scope": "lte",
"trust": 0.8,
"vendor": "advantech",
"version": "version 6.1"
},
{
"model": null,
"scope": "eq",
"trust": 0.6,
"vendor": "advantech studio",
"version": "6.1"
},
{
"model": null,
"scope": "eq",
"trust": 0.6,
"vendor": "web studio",
"version": "7.0"
},
{
"model": "ntwebserver",
"scope": null,
"trust": 0.6,
"vendor": "indusoft",
"version": null
},
{
"model": "web studio",
"scope": "eq",
"trust": 0.3,
"vendor": "indusoft",
"version": "6.1"
},
{
"model": "indusoft",
"scope": "eq",
"trust": 0.3,
"vendor": "advantech",
"version": "6.1"
}
],
"sources": [
{
"db": "IVD",
"id": "7d738f01-463f-11e9-a408-000c29342cb1"
},
{
"db": "IVD",
"id": "6e076d62-2355-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "5696d59c-1fa3-11e6-abef-000c29c66e3d"
},
{
"db": "CERT/CC",
"id": "VU#506864"
},
{
"db": "CNVD",
"id": "CNVD-2011-0144"
},
{
"db": "BID",
"id": "45783"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-001027"
},
{
"db": "CNNVD",
"id": "CNNVD-201101-206"
},
{
"db": "NVD",
"id": "CVE-2011-0488"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:advantech:advantech_studio",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2011-001027"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Jeremy Brown",
"sources": [
{
"db": "BID",
"id": "45783"
},
{
"db": "CNNVD",
"id": "CNNVD-201101-206"
}
],
"trust": 0.9
},
"cve": "CVE-2011-0488",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CVE-2011-0488",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "7d738f01-463f-11e9-a408-000c29342cb1",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "6e076d62-2355-11e6-abef-000c29c66e3d",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "5696d59c-1fa3-11e6-abef-000c29c66e3d",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "VHN-48433",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2011-0488",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "CARNEGIE MELLON",
"id": "VU#506864",
"trust": 0.8,
"value": "71.28"
},
{
"author": "NVD",
"id": "CVE-2011-0488",
"trust": 0.8,
"value": "High"
},
{
"author": "CNNVD",
"id": "CNNVD-201101-206",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "IVD",
"id": "7d738f01-463f-11e9-a408-000c29342cb1",
"trust": 0.2,
"value": "CRITICAL"
},
{
"author": "IVD",
"id": "6e076d62-2355-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "CRITICAL"
},
{
"author": "IVD",
"id": "5696d59c-1fa3-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-48433",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "7d738f01-463f-11e9-a408-000c29342cb1"
},
{
"db": "IVD",
"id": "6e076d62-2355-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "5696d59c-1fa3-11e6-abef-000c29c66e3d"
},
{
"db": "CERT/CC",
"id": "VU#506864"
},
{
"db": "VULHUB",
"id": "VHN-48433"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-001027"
},
{
"db": "CNNVD",
"id": "CNNVD-201101-206"
},
{
"db": "NVD",
"id": "CVE-2011-0488"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advantech Studio 6.1 and InduSoft Web Studio 7.0, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long request to TCP port 80. Advantech Studio Test Web Server Contains a buffer overflow vulnerability. Indusoft is a powerful interpersonal interface graphical design software (SCADA) developed by indusoft. InduSoft NTWebServer runs the test WEB service on TCP port 80. Successful exploitation of the vulnerability can be performed in the context of the service process. Code. InduSoft NTWebServer is prone to a stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. \nAn attacker can exploit this issue to execute arbitrary code in the context of the affected server. Successful attacks will compromise the server and possibly the underlying computer. Failed attacks will likely cause denial-of-service conditions. \n\nSOLUTION:\nApply patch. ----------------------------------------------------------------------\n\n\nSecure your corporate defenses and reduce complexity in handling vulnerability threats with the new Secunia Vulnerability Intelligence Manager (VIM). \n\nRequest a free trial: \nhttp://secunia.com/products/corporate/vim/\n\n\n----------------------------------------------------------------------\n\nTITLE:\nInduSoft Web Studio NTWebServer Buffer Overflow Vulnerability\n\nSECUNIA ADVISORY ID:\nSA42883\n\nVERIFY ADVISORY:\nSecunia.com\nhttp://secunia.com/advisories/42883/\nCustomer Area (Credentials Required)\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=42883\n\nRELEASE DATE:\n2011-01-13\n\nDISCUSS ADVISORY:\nhttp://secunia.com/advisories/42883/#comments\n\nAVAILABLE ON SITE AND IN CUSTOMER AREA:\n * Last Update\n * Popularity\n * Comments\n * Criticality Level\n * Impact\n * Where\n * Solution Status\n * Operating System / Software\n * CVE Reference(s)\n\nhttp://secunia.com/advisories/42883/\n\nONLY AVAILABLE IN CUSTOMER AREA:\n * Authentication Level\n * Report Reliability\n * Secunia PoC\n * Secunia Analysis\n * Systems Affected\n * Approve Distribution\n * Remediation Status\n * Secunia CVSS Score\n * CVSS\n\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=42883\n\nONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI:\n * AUTOMATED SCANNING\n\nhttp://secunia.com/vulnerability_scanning/personal/\nhttp://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/\n\nDESCRIPTION:\nA vulnerability has been reported in InduSoft Web Studio, which can\nbe exploited by malicious people to compromise a vulnerable system. \n\nThe vulnerability is reported in version 7.0. Other versions may also\nbe affected. \n\nSOLUTION:\nRestrict access to trusted hosts only. Use a different web server. \n\nPROVIDED AND/OR DISCOVERED BY:\nUS-CERT credits Jeremy Brown. \n\nORIGINAL ADVISORY:\nInduSoft:\nhttp://www.indusoft.com/blog/?p=337\n\nOTHER REFERENCES:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\nDEEP LINKS:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\nEXTENDED DESCRIPTION:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\nEXTENDED SOLUTION:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\nEXPLOIT:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\nprivate users keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2011-0488"
},
{
"db": "CERT/CC",
"id": "VU#506864"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-001027"
},
{
"db": "CNVD",
"id": "CNVD-2011-0144"
},
{
"db": "BID",
"id": "45783"
},
{
"db": "IVD",
"id": "7d738f01-463f-11e9-a408-000c29342cb1"
},
{
"db": "IVD",
"id": "6e076d62-2355-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "5696d59c-1fa3-11e6-abef-000c29c66e3d"
},
{
"db": "VULHUB",
"id": "VHN-48433"
},
{
"db": "PACKETSTORM",
"id": "97511"
},
{
"db": "PACKETSTORM",
"id": "97510"
}
],
"trust": 3.96
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#506864",
"trust": 4.2
},
{
"db": "NVD",
"id": "CVE-2011-0488",
"trust": 3.4
},
{
"db": "ICS CERT",
"id": "ICSA-10-337-01",
"trust": 3.3
},
{
"db": "BID",
"id": "45783",
"trust": 2.6
},
{
"db": "SECUNIA",
"id": "42883",
"trust": 2.6
},
{
"db": "SECUNIA",
"id": "42903",
"trust": 2.6
},
{
"db": "VUPEN",
"id": "ADV-2011-0092",
"trust": 2.5
},
{
"db": "VUPEN",
"id": "ADV-2011-0093",
"trust": 2.5
},
{
"db": "OSVDB",
"id": "70396",
"trust": 2.5
},
{
"db": "XF",
"id": "64678",
"trust": 1.4
},
{
"db": "CNNVD",
"id": "CNNVD-201101-206",
"trust": 1.3
},
{
"db": "CNVD",
"id": "CNVD-2011-0144",
"trust": 1.0
},
{
"db": "JVNDB",
"id": "JVNDB-2011-001027",
"trust": 0.8
},
{
"db": "NSFOCUS",
"id": "17588",
"trust": 0.6
},
{
"db": "ICS CERT ALERT",
"id": "ICS-ALERT-11-230-01",
"trust": 0.3
},
{
"db": "IVD",
"id": "7D738F01-463F-11E9-A408-000C29342CB1",
"trust": 0.2
},
{
"db": "IVD",
"id": "6E076D62-2355-11E6-ABEF-000C29C66E3D",
"trust": 0.2
},
{
"db": "IVD",
"id": "5696D59C-1FA3-11E6-ABEF-000C29C66E3D",
"trust": 0.2
},
{
"db": "VULHUB",
"id": "VHN-48433",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "97511",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "97510",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "7d738f01-463f-11e9-a408-000c29342cb1"
},
{
"db": "IVD",
"id": "6e076d62-2355-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "5696d59c-1fa3-11e6-abef-000c29c66e3d"
},
{
"db": "CERT/CC",
"id": "VU#506864"
},
{
"db": "CNVD",
"id": "CNVD-2011-0144"
},
{
"db": "VULHUB",
"id": "VHN-48433"
},
{
"db": "BID",
"id": "45783"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-001027"
},
{
"db": "PACKETSTORM",
"id": "97511"
},
{
"db": "PACKETSTORM",
"id": "97510"
},
{
"db": "CNNVD",
"id": "CNNVD-201101-206"
},
{
"db": "NVD",
"id": "CVE-2011-0488"
}
]
},
"id": "VAR-201101-0383",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "7d738f01-463f-11e9-a408-000c29342cb1"
},
{
"db": "IVD",
"id": "6e076d62-2355-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "5696d59c-1fa3-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2011-0144"
},
{
"db": "VULHUB",
"id": "VHN-48433"
}
],
"trust": 2.0212212333333333
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 1.2
}
],
"sources": [
{
"db": "IVD",
"id": "7d738f01-463f-11e9-a408-000c29342cb1"
},
{
"db": "IVD",
"id": "6e076d62-2355-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "5696d59c-1fa3-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2011-0144"
}
]
},
"last_update_date": "2024-11-23T22:23:27.725000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Advantech Studio Test Web Server Buffer Overflow",
"trust": 0.8,
"url": "http://www.advantechdirect.com/emarketingprograms/AStudio_Patch/AStudio_Patch.htm"
},
{
"title": "\u30d1\u30fc\u30c8\u30ca\u30fc\u60c5\u5831",
"trust": 0.8,
"url": "http://www.advantech.co.jp/support-AJP/distributors.asp"
},
{
"title": "Top Page",
"trust": 0.8,
"url": "http://www.advantech.co.jp/"
},
{
"title": "NTWebServer",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=37113"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2011-001027"
},
{
"db": "CNNVD",
"id": "CNNVD-201101-206"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-119",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-48433"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-001027"
},
{
"db": "NVD",
"id": "CVE-2011-0488"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.4,
"url": "http://www.kb.cert.org/vuls/id/506864"
},
{
"trust": 3.3,
"url": "http://www.us-cert.gov/control_systems/pdf/icsa-10-337-01.pdf"
},
{
"trust": 2.6,
"url": "http://www.indusoft.com/blog/?p=337"
},
{
"trust": 2.5,
"url": "http://www.osvdb.org/70396"
},
{
"trust": 2.5,
"url": "http://secunia.com/advisories/42883"
},
{
"trust": 2.5,
"url": "http://secunia.com/advisories/42903"
},
{
"trust": 2.5,
"url": "http://www.vupen.com/english/advisories/2011/0092"
},
{
"trust": 2.5,
"url": "http://www.vupen.com/english/advisories/2011/0093"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/45783"
},
{
"trust": 1.7,
"url": "http://downloadt.advantech.com/download/downloadsr.aspx?file_id=1-i1d7qd"
},
{
"trust": 1.7,
"url": "http://www.advantechdirect.com/emarketingprograms/astudio_patch/astudio_patch.htm"
},
{
"trust": 1.4,
"url": "http://xforce.iss.net/xforce/xfdb/64678"
},
{
"trust": 1.1,
"url": "http://www.indusoft.com/mainpage.php?aricleid=17\u0026type=certified/hardware"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64678"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-0488"
},
{
"trust": 0.8,
"url": "http://jvn.jp/cert/jvnvu506864"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-0488"
},
{
"trust": 0.6,
"url": "http://www.nsfocus.net/vulndb/17588"
},
{
"trust": 0.3,
"url": "http://www.us-cert.gov/control_systems/pdf/ics-alert-11-230-01.pdf"
},
{
"trust": 0.2,
"url": "http://secunia.com/products/corporate/evm/"
},
{
"trust": 0.2,
"url": "http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/"
},
{
"trust": 0.2,
"url": "http://secunia.com/advisories/secunia_security_advisories/"
},
{
"trust": 0.2,
"url": "http://secunia.com/products/corporate/vim/"
},
{
"trust": 0.2,
"url": "http://secunia.com/vulnerability_scanning/personal/"
},
{
"trust": 0.2,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.2,
"url": "http://secunia.com/advisories/about_secunia_advisories/"
},
{
"trust": 0.1,
"url": "http://support.advantech.com.tw/support/downloadsrdetail.aspx?sr_id=1-i1b0td\u0026doc_source=download"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/42903/#comments"
},
{
"trust": 0.1,
"url": "https://ca.secunia.com/?page=viewadvisory\u0026vuln_id=42903"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/42903/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/42883/#comments"
},
{
"trust": 0.1,
"url": "https://ca.secunia.com/?page=viewadvisory\u0026vuln_id=42883"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/42883/"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#506864"
},
{
"db": "CNVD",
"id": "CNVD-2011-0144"
},
{
"db": "VULHUB",
"id": "VHN-48433"
},
{
"db": "BID",
"id": "45783"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-001027"
},
{
"db": "PACKETSTORM",
"id": "97511"
},
{
"db": "PACKETSTORM",
"id": "97510"
},
{
"db": "CNNVD",
"id": "CNNVD-201101-206"
},
{
"db": "NVD",
"id": "CVE-2011-0488"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "7d738f01-463f-11e9-a408-000c29342cb1"
},
{
"db": "IVD",
"id": "6e076d62-2355-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "5696d59c-1fa3-11e6-abef-000c29c66e3d"
},
{
"db": "CERT/CC",
"id": "VU#506864"
},
{
"db": "CNVD",
"id": "CNVD-2011-0144"
},
{
"db": "VULHUB",
"id": "VHN-48433"
},
{
"db": "BID",
"id": "45783"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-001027"
},
{
"db": "PACKETSTORM",
"id": "97511"
},
{
"db": "PACKETSTORM",
"id": "97510"
},
{
"db": "CNNVD",
"id": "CNNVD-201101-206"
},
{
"db": "NVD",
"id": "CVE-2011-0488"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2011-01-13T00:00:00",
"db": "IVD",
"id": "7d738f01-463f-11e9-a408-000c29342cb1"
},
{
"date": "2011-01-19T00:00:00",
"db": "IVD",
"id": "6e076d62-2355-11e6-abef-000c29c66e3d"
},
{
"date": "2011-01-13T00:00:00",
"db": "IVD",
"id": "5696d59c-1fa3-11e6-abef-000c29c66e3d"
},
{
"date": "2011-01-12T00:00:00",
"db": "CERT/CC",
"id": "VU#506864"
},
{
"date": "2011-01-13T00:00:00",
"db": "CNVD",
"id": "CNVD-2011-0144"
},
{
"date": "2011-01-18T00:00:00",
"db": "VULHUB",
"id": "VHN-48433"
},
{
"date": "2011-01-12T00:00:00",
"db": "BID",
"id": "45783"
},
{
"date": "2011-02-02T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2011-001027"
},
{
"date": "2011-01-13T05:05:56",
"db": "PACKETSTORM",
"id": "97511"
},
{
"date": "2011-01-13T05:05:54",
"db": "PACKETSTORM",
"id": "97510"
},
{
"date": "2011-01-19T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201101-206"
},
{
"date": "2011-01-18T18:03:09.033000",
"db": "NVD",
"id": "CVE-2011-0488"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2011-01-12T00:00:00",
"db": "CERT/CC",
"id": "VU#506864"
},
{
"date": "2011-01-13T00:00:00",
"db": "CNVD",
"id": "CNVD-2011-0144"
},
{
"date": "2017-08-17T00:00:00",
"db": "VULHUB",
"id": "VHN-48433"
},
{
"date": "2011-08-19T17:10:00",
"db": "BID",
"id": "45783"
},
{
"date": "2011-02-02T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2011-001027"
},
{
"date": "2011-01-19T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201101-206"
},
{
"date": "2024-11-21T01:24:07.093000",
"db": "NVD",
"id": "CVE-2011-0488"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201101-206"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "InduSoft NTWebServer Web Service Stack-Based Buffer Overflow Vulnerability",
"sources": [
{
"db": "IVD",
"id": "7d738f01-463f-11e9-a408-000c29342cb1"
},
{
"db": "IVD",
"id": "5696d59c-1fa3-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2011-0144"
},
{
"db": "BID",
"id": "45783"
}
],
"trust": 1.3
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Buffer overflow",
"sources": [
{
"db": "IVD",
"id": "7d738f01-463f-11e9-a408-000c29342cb1"
},
{
"db": "IVD",
"id": "6e076d62-2355-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "5696d59c-1fa3-11e6-abef-000c29c66e3d"
},
{
"db": "CNNVD",
"id": "CNNVD-201101-206"
}
],
"trust": 1.2
}
}
var-201508-0279
Vulnerability from variot
Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage, which allows local users to obtain sensitive information by reading a file. InduSoft Web Studio is a SCADA system and embedded instrumentation solution for developing human-machine interfaces, supervisory control and data acquisition. Multiple Schneider Electric products are prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information which may aid in further attacks. The following products are vulnerable: InduSoft Web Studio 7.1.3.4 and prior InTouch Machine Edition 2014 7.1.3.4 and prior
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201508-0279",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "web studio",
"scope": "lte",
"trust": 1.0,
"vendor": "indusoft",
"version": "7.1.3.5"
},
{
"model": "intouch",
"scope": "lte",
"trust": 1.0,
"vendor": "wonderware",
"version": "7.1"
},
{
"model": "indusoft web studio",
"scope": "lt",
"trust": 0.8,
"vendor": "schneider electric",
"version": "7.1.3.5 patch 5"
},
{
"model": "intouch machine edition 2014",
"scope": "lte",
"trust": 0.8,
"vendor": "schneider electric",
"version": "7.1 sp3 patch 4"
},
{
"model": "electric indusoft web studio patch",
"scope": "lt",
"trust": 0.6,
"vendor": "schneider",
"version": "7.1.3.55"
},
{
"model": "electric wonderware intouch machine edition sp3 patch",
"scope": "eq",
"trust": 0.6,
"vendor": "schneider",
"version": "7.14"
},
{
"model": "intouch",
"scope": "eq",
"trust": 0.6,
"vendor": "wonderware",
"version": "7.1"
},
{
"model": "intouch machine edition",
"scope": "eq",
"trust": 0.3,
"vendor": "schneider electric",
"version": "20147.1.3.2"
},
{
"model": "intouch machine edition sp3 patch",
"scope": "eq",
"trust": 0.3,
"vendor": "schneider electric",
"version": "20147.14"
},
{
"model": "indusoft web studio sp patch",
"scope": "eq",
"trust": 0.3,
"vendor": "schneider electric",
"version": "7.1.3.434"
},
{
"model": "indusoft web studio",
"scope": "eq",
"trust": 0.3,
"vendor": "schneider electric",
"version": "7.1.3.4"
},
{
"model": "indusoft web studio",
"scope": "eq",
"trust": 0.3,
"vendor": "schneider electric",
"version": "7.1.3.2"
},
{
"model": "indusoft web studio patch",
"scope": "ne",
"trust": 0.3,
"vendor": "schneider electric",
"version": "7.1.3.55"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "web studio",
"version": "*"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "intouch",
"version": "*"
}
],
"sources": [
{
"db": "IVD",
"id": "80c77fcc-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2015-05102"
},
{
"db": "BID",
"id": "76127"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-003985"
},
{
"db": "CNNVD",
"id": "CNNVD-201507-833"
},
{
"db": "NVD",
"id": "CVE-2015-1009"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:schneider_electric:indusoft_web_studio",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:schneider_electric:wonderware_intouch_2014",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2015-003985"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Gleb Gritsai, Ilya Karpov, and Kirill Nesterov of Positive Technologies Security Lab.",
"sources": [
{
"db": "BID",
"id": "76127"
}
],
"trust": 0.3
},
"cve": "CVE-2015-1009",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "SINGLE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 1.7,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 3.1,
"id": "CVE-2015-1009",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "LOW",
"trust": 1.8,
"vectorString": "AV:L/AC:L/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "SINGLE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 6.8,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.1,
"id": "CNVD-2015-05102",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "SINGLE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 6.8,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.1,
"id": "80c77fcc-2351-11e6-abef-000c29c66e3d",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
"version": "2.9 [IVD]"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2015-1009",
"trust": 1.0,
"value": "LOW"
},
{
"author": "NVD",
"id": "CVE-2015-1009",
"trust": 0.8,
"value": "Low"
},
{
"author": "CNVD",
"id": "CNVD-2015-05102",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201507-833",
"trust": 0.6,
"value": "LOW"
},
{
"author": "IVD",
"id": "80c77fcc-2351-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "LOW"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "80c77fcc-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2015-05102"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-003985"
},
{
"db": "CNNVD",
"id": "CNNVD-201507-833"
},
{
"db": "NVD",
"id": "CVE-2015-1009"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage, which allows local users to obtain sensitive information by reading a file. InduSoft Web Studio is a SCADA system and embedded instrumentation solution for developing human-machine interfaces, supervisory control and data acquisition. Multiple Schneider Electric products are prone to a local information-disclosure vulnerability. \nLocal attackers can exploit this issue to obtain sensitive information which may aid in further attacks. \nThe following products are vulnerable:\nInduSoft Web Studio 7.1.3.4 and prior\nInTouch Machine Edition 2014 7.1.3.4 and prior",
"sources": [
{
"db": "NVD",
"id": "CVE-2015-1009"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-003985"
},
{
"db": "CNVD",
"id": "CNVD-2015-05102"
},
{
"db": "BID",
"id": "76127"
},
{
"db": "IVD",
"id": "80c77fcc-2351-11e6-abef-000c29c66e3d"
}
],
"trust": 2.61
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2015-1009",
"trust": 3.5
},
{
"db": "ICS CERT",
"id": "ICSA-15-211-01",
"trust": 3.3
},
{
"db": "SCHNEIDER",
"id": "SEVD-2015-100-01",
"trust": 1.6
},
{
"db": "CNVD",
"id": "CNVD-2015-05102",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201507-833",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2015-003985",
"trust": 0.8
},
{
"db": "BID",
"id": "76127",
"trust": 0.3
},
{
"db": "IVD",
"id": "80C77FCC-2351-11E6-ABEF-000C29C66E3D",
"trust": 0.2
}
],
"sources": [
{
"db": "IVD",
"id": "80c77fcc-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2015-05102"
},
{
"db": "BID",
"id": "76127"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-003985"
},
{
"db": "CNNVD",
"id": "CNNVD-201507-833"
},
{
"db": "NVD",
"id": "CVE-2015-1009"
}
]
},
"id": "VAR-201508-0279",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "80c77fcc-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2015-05102"
}
],
"trust": 1.5412992375
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "80c77fcc-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2015-05102"
}
]
},
"last_update_date": "2024-11-23T22:52:43.048000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "SEVD-2015-100-01",
"trust": 0.8,
"url": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-100-01"
},
{
"title": "Schneider Electric InduSoft Password Storage Vulnerability Patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/61905"
},
{
"title": "IWS71.3.5",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=57105"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-05102"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-003985"
},
{
"db": "CNNVD",
"id": "CNNVD-201507-833"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-200",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2015-003985"
},
{
"db": "NVD",
"id": "CVE-2015-1009"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.3,
"url": "https://ics-cert.us-cert.gov/advisories/icsa-15-211-01"
},
{
"trust": 1.6,
"url": "https://gcsresource.invensys.com/support/docs/_securitybulletins/security_bulletin_lfsec00000110.pdf"
},
{
"trust": 1.6,
"url": "http://download.schneider-electric.com/files?p_doc_ref=sevd-2015-100-01"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-1009"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-1009"
},
{
"trust": 0.3,
"url": "http://www.schneider-electric.com/site/home/index.cfm/ww/?selectcountry=true"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-05102"
},
{
"db": "BID",
"id": "76127"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-003985"
},
{
"db": "CNNVD",
"id": "CNNVD-201507-833"
},
{
"db": "NVD",
"id": "CVE-2015-1009"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "80c77fcc-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2015-05102"
},
{
"db": "BID",
"id": "76127"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-003985"
},
{
"db": "CNNVD",
"id": "CNNVD-201507-833"
},
{
"db": "NVD",
"id": "CVE-2015-1009"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2015-08-04T00:00:00",
"db": "IVD",
"id": "80c77fcc-2351-11e6-abef-000c29c66e3d"
},
{
"date": "2015-08-04T00:00:00",
"db": "CNVD",
"id": "CNVD-2015-05102"
},
{
"date": "2015-07-30T00:00:00",
"db": "BID",
"id": "76127"
},
{
"date": "2015-08-05T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-003985"
},
{
"date": "2015-07-31T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201507-833"
},
{
"date": "2015-08-01T01:59:00.067000",
"db": "NVD",
"id": "CVE-2015-1009"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2015-08-04T00:00:00",
"db": "CNVD",
"id": "CNVD-2015-05102"
},
{
"date": "2015-07-30T00:00:00",
"db": "BID",
"id": "76127"
},
{
"date": "2015-08-05T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-003985"
},
{
"date": "2015-08-06T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201507-833"
},
{
"date": "2024-11-21T02:24:29.147000",
"db": "NVD",
"id": "CVE-2015-1009"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "BID",
"id": "76127"
},
{
"db": "CNNVD",
"id": "CNNVD-201507-833"
}
],
"trust": 0.9
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Schneider Electric InduSoft Password storage vulnerability",
"sources": [
{
"db": "IVD",
"id": "80c77fcc-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2015-05102"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "information disclosure",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201507-833"
}
],
"trust": 0.6
}
}
var-201404-0551
Vulnerability from variot
Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ability to browse outside of the web root via directory traversal. A remote attacker can abuse this to download sensitive files and execute remote code under the context of the user. InduSoft Web Studio is a complete graphics control software that includes the various functional modules required to develop Human Machine Interface (HMI), Management Control, Data Acquisition System (SCADA) and embedded control. InduSoft Web Studio is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary files within the context of the web server. Information harvested may aid in launching further attacks. InduSoft Web Studio 7.1 is vulnerable; other versions may also be affected
Show details on source website{
"affected_products": {
"_id": null,
"data": [
{
"_id": null,
"model": "web studio",
"scope": "eq",
"trust": 2.2,
"vendor": "indusoft",
"version": "7.1"
},
{
"_id": null,
"model": null,
"scope": "eq",
"trust": 0.8,
"vendor": "web studio",
"version": "7.1"
},
{
"_id": null,
"model": "indusoft web studio",
"scope": "eq",
"trust": 0.8,
"vendor": "schneider electric",
"version": "7.1 that\u0027s all 7.1 sp2 patch 4"
},
{
"_id": null,
"model": "indusoft web studio",
"scope": "eq",
"trust": 0.8,
"vendor": "schneider electric",
"version": null
},
{
"_id": null,
"model": "webstudio",
"scope": null,
"trust": 0.7,
"vendor": "indusoft",
"version": null
},
{
"_id": null,
"model": "web studio sp2",
"scope": "lte",
"trust": 0.6,
"vendor": "indusoft",
"version": "\u003c=7.1"
},
{
"_id": null,
"model": "web studio sp1",
"scope": "eq",
"trust": 0.6,
"vendor": "indusoft",
"version": "7.1"
},
{
"_id": null,
"model": null,
"scope": "eq",
"trust": 0.4,
"vendor": "web studio",
"version": "*"
}
],
"sources": [
{
"db": "IVD",
"id": "7d76c350-463f-11e9-b69f-000c29342cb1"
},
{
"db": "IVD",
"id": "236decfa-1edb-11e6-abef-000c29c66e3d"
},
{
"db": "ZDI",
"id": "ZDI-14-118"
},
{
"db": "CNVD",
"id": "CNVD-2014-02688"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002261"
},
{
"db": "CNNVD",
"id": "CNNVD-201404-504"
},
{
"db": "NVD",
"id": "CVE-2014-0780"
}
]
},
"credits": {
"_id": null,
"data": "John Leitch",
"sources": [
{
"db": "ZDI",
"id": "ZDI-14-118"
},
{
"db": "BID",
"id": "67056"
}
],
"trust": 1.0
},
"cve": "CVE-2014-0780",
"cvss": {
"_id": null,
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2014-0780",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 2.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2014-02688",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "7d76c350-463f-11e9-b69f-000c29342cb1",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "236decfa-1edb-11e6-abef-000c29c66e3d",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.9 [IVD]"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2014-0780",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 9.8,
"baseSeverity": "Critical",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2014-0780",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2014-0780",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "NVD",
"id": "CVE-2014-0780",
"trust": 0.8,
"value": "Critical"
},
{
"author": "ZDI",
"id": "CVE-2014-0780",
"trust": 0.7,
"value": "HIGH"
},
{
"author": "CNVD",
"id": "CNVD-2014-02688",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201404-504",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "IVD",
"id": "7d76c350-463f-11e9-b69f-000c29342cb1",
"trust": 0.2,
"value": "HIGH"
},
{
"author": "IVD",
"id": "236decfa-1edb-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "HIGH"
},
{
"author": "VULMON",
"id": "CVE-2014-0780",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "7d76c350-463f-11e9-b69f-000c29342cb1"
},
{
"db": "IVD",
"id": "236decfa-1edb-11e6-abef-000c29c66e3d"
},
{
"db": "ZDI",
"id": "ZDI-14-118"
},
{
"db": "CNVD",
"id": "CNVD-2014-02688"
},
{
"db": "VULMON",
"id": "CVE-2014-0780"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002261"
},
{
"db": "CNNVD",
"id": "CNNVD-201404-504"
},
{
"db": "NVD",
"id": "CVE-2014-0780"
}
]
},
"description": {
"_id": null,
"data": "Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ability to browse outside of the web root via directory traversal. A remote attacker can abuse this to download sensitive files and execute remote code under the context of the user. InduSoft Web Studio is a complete graphics control software that includes the various functional modules required to develop Human Machine Interface (HMI), Management Control, Data Acquisition System (SCADA) and embedded control. InduSoft Web Studio is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. \nExploiting this issue will allow an attacker to view arbitrary files within the context of the web server. Information harvested may aid in launching further attacks. \nInduSoft Web Studio 7.1 is vulnerable; other versions may also be affected",
"sources": [
{
"db": "NVD",
"id": "CVE-2014-0780"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002261"
},
{
"db": "ZDI",
"id": "ZDI-14-118"
},
{
"db": "CNVD",
"id": "CNVD-2014-02688"
},
{
"db": "BID",
"id": "67056"
},
{
"db": "IVD",
"id": "7d76c350-463f-11e9-b69f-000c29342cb1"
},
{
"db": "IVD",
"id": "236decfa-1edb-11e6-abef-000c29c66e3d"
},
{
"db": "VULMON",
"id": "CVE-2014-0780"
}
],
"trust": 3.51
},
"exploit_availability": {
"_id": null,
"data": [
{
"reference": "https://vulmon.com/exploitdetails?qidtp=exploitdb\u0026qid=42699",
"trust": 0.1,
"type": "exploit"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2014-0780"
}
]
},
"external_ids": {
"_id": null,
"data": [
{
"db": "NVD",
"id": "CVE-2014-0780",
"trust": 5.3
},
{
"db": "ICS CERT",
"id": "ICSA-14-107-02",
"trust": 3.1
},
{
"db": "BID",
"id": "67056",
"trust": 2.0
},
{
"db": "EXPLOIT-DB",
"id": "42699",
"trust": 1.1
},
{
"db": "CNVD",
"id": "CNVD-2014-02688",
"trust": 1.0
},
{
"db": "CNNVD",
"id": "CNNVD-201404-504",
"trust": 1.0
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002261",
"trust": 0.8
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-2108",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-14-118",
"trust": 0.7
},
{
"db": "OSVDB",
"id": "105551",
"trust": 0.6
},
{
"db": "IVD",
"id": "7D76C350-463F-11E9-B69F-000C29342CB1",
"trust": 0.2
},
{
"db": "IVD",
"id": "236DECFA-1EDB-11E6-ABEF-000C29C66E3D",
"trust": 0.2
},
{
"db": "VULMON",
"id": "CVE-2014-0780",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "7d76c350-463f-11e9-b69f-000c29342cb1"
},
{
"db": "IVD",
"id": "236decfa-1edb-11e6-abef-000c29c66e3d"
},
{
"db": "ZDI",
"id": "ZDI-14-118"
},
{
"db": "CNVD",
"id": "CNVD-2014-02688"
},
{
"db": "VULMON",
"id": "CVE-2014-0780"
},
{
"db": "BID",
"id": "67056"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002261"
},
{
"db": "CNNVD",
"id": "CNNVD-201404-504"
},
{
"db": "NVD",
"id": "CVE-2014-0780"
}
]
},
"id": "VAR-201404-0551",
"iot": {
"_id": null,
"data": true,
"sources": [
{
"db": "IVD",
"id": "7d76c350-463f-11e9-b69f-000c29342cb1"
},
{
"db": "IVD",
"id": "236decfa-1edb-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-02688"
}
],
"trust": 1.58893775
},
"iot_taxonomy": {
"_id": null,
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 1.0
}
],
"sources": [
{
"db": "IVD",
"id": "7d76c350-463f-11e9-b69f-000c29342cb1"
},
{
"db": "IVD",
"id": "236decfa-1edb-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-02688"
}
]
},
"last_update_date": "2024-11-23T22:23:06.261000Z",
"patch": {
"_id": null,
"data": [
{
"title": "InduSoft",
"trust": 0.8,
"url": "http://www.indusoft.com/"
},
{
"title": "Indusoft has issued an update to correct this vulnerability.",
"trust": 0.7,
"url": "http://ics-cert.us-cert.gov/advisories/ICSA-14-107-02"
},
{
"title": "InduSoft Web Studio NTWebServer Directory Traversal Vulnerability Patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/45216"
},
{
"title": "IWS71.2.4",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=49642"
},
{
"title": "Known Exploited Vulnerabilities Detector",
"trust": 0.1,
"url": "https://github.com/Ostorlab/KEV "
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-14-118"
},
{
"db": "CNVD",
"id": "CNVD-2014-02688"
},
{
"db": "VULMON",
"id": "CVE-2014-0780"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002261"
},
{
"db": "CNNVD",
"id": "CNNVD-201404-504"
}
]
},
"problemtype_data": {
"_id": null,
"data": [
{
"problemtype": "CWE-22",
"trust": 1.0
},
{
"problemtype": "Path traversal (CWE-22) [NVD evaluation ]",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2014-002261"
},
{
"db": "NVD",
"id": "CVE-2014-0780"
}
]
},
"references": {
"_id": null,
"data": [
{
"trust": 3.1,
"url": "http://ics-cert.us-cert.gov/advisories/icsa-14-107-02"
},
{
"trust": 1.2,
"url": "https://www.exploit-db.com/exploits/42699/"
},
{
"trust": 1.1,
"url": "http://www.securityfocus.com/bid/67056"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-0780"
},
{
"trust": 0.8,
"url": "https://cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"trust": 0.8,
"url": "http://ics-cert.us-cert.gov/advisories/icsa-14-107-02\u00a0"
},
{
"trust": 0.6,
"url": "http://osvdb.com/show/osvdb/105551"
},
{
"trust": 0.3,
"url": "http://www.indusoft.com/"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/22.html"
},
{
"trust": 0.1,
"url": "http://tools.cisco.com/security/center/viewalert.x?alertid=34041"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://github.com/ostorlab/kev"
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-14-118"
},
{
"db": "CNVD",
"id": "CNVD-2014-02688"
},
{
"db": "VULMON",
"id": "CVE-2014-0780"
},
{
"db": "BID",
"id": "67056"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002261"
},
{
"db": "CNNVD",
"id": "CNNVD-201404-504"
},
{
"db": "NVD",
"id": "CVE-2014-0780"
}
]
},
"sources": {
"_id": null,
"data": [
{
"db": "IVD",
"id": "7d76c350-463f-11e9-b69f-000c29342cb1",
"ident": null
},
{
"db": "IVD",
"id": "236decfa-1edb-11e6-abef-000c29c66e3d",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-14-118",
"ident": null
},
{
"db": "CNVD",
"id": "CNVD-2014-02688",
"ident": null
},
{
"db": "VULMON",
"id": "CVE-2014-0780",
"ident": null
},
{
"db": "BID",
"id": "67056",
"ident": null
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002261",
"ident": null
},
{
"db": "CNNVD",
"id": "CNNVD-201404-504",
"ident": null
},
{
"db": "NVD",
"id": "CVE-2014-0780",
"ident": null
}
]
},
"sources_release_date": {
"_id": null,
"data": [
{
"date": "2014-04-29T00:00:00",
"db": "IVD",
"id": "7d76c350-463f-11e9-b69f-000c29342cb1",
"ident": null
},
{
"date": "2014-04-29T00:00:00",
"db": "IVD",
"id": "236decfa-1edb-11e6-abef-000c29c66e3d",
"ident": null
},
{
"date": "2014-05-02T00:00:00",
"db": "ZDI",
"id": "ZDI-14-118",
"ident": null
},
{
"date": "2014-04-29T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-02688",
"ident": null
},
{
"date": "2014-04-25T00:00:00",
"db": "VULMON",
"id": "CVE-2014-0780",
"ident": null
},
{
"date": "2014-04-24T00:00:00",
"db": "BID",
"id": "67056",
"ident": null
},
{
"date": "2014-04-28T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2014-002261",
"ident": null
},
{
"date": "2014-04-28T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201404-504",
"ident": null
},
{
"date": "2014-04-25T05:12:07.787000",
"db": "NVD",
"id": "CVE-2014-0780",
"ident": null
}
]
},
"sources_update_date": {
"_id": null,
"data": [
{
"date": "2014-05-02T00:00:00",
"db": "ZDI",
"id": "ZDI-14-118",
"ident": null
},
{
"date": "2014-04-29T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-02688",
"ident": null
},
{
"date": "2017-09-16T00:00:00",
"db": "VULMON",
"id": "CVE-2014-0780",
"ident": null
},
{
"date": "2014-05-21T01:02:00",
"db": "BID",
"id": "67056",
"ident": null
},
{
"date": "2024-07-08T04:59:00",
"db": "JVNDB",
"id": "JVNDB-2014-002261",
"ident": null
},
{
"date": "2014-04-28T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201404-504",
"ident": null
},
{
"date": "2024-11-21T02:02:47.540000",
"db": "NVD",
"id": "CVE-2014-0780",
"ident": null
}
]
},
"threat_type": {
"_id": null,
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201404-504"
}
],
"trust": 0.6
},
"title": {
"_id": null,
"data": "InduSoft Web Studio NTWebServer Directory Traversal Vulnerability",
"sources": [
{
"db": "IVD",
"id": "7d76c350-463f-11e9-b69f-000c29342cb1"
},
{
"db": "IVD",
"id": "236decfa-1edb-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-02688"
}
],
"trust": 1.0
},
"type": {
"_id": null,
"data": "Path traversal",
"sources": [
{
"db": "IVD",
"id": "7d76c350-463f-11e9-b69f-000c29342cb1"
},
{
"db": "IVD",
"id": "236decfa-1edb-11e6-abef-000c29c66e3d"
},
{
"db": "CNNVD",
"id": "CNNVD-201404-504"
}
],
"trust": 1.0
}
}
var-201509-0264
Vulnerability from variot
The Remote Agent component in Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-2649. Zero Day Initiative Is vulnerable to this vulnerability ZDI-CAN-2649 Was numbered.A third party may execute arbitrary code. User interaction is not required to exploit this vulnerability.The specific flaw exists within the Remote Agent service listening on TCP port 1234. The issue lies in the lack of authentication, allowing attackers to execute remote API calls on the service. The Remote Agent is one of the remote agent components. InduSoft Web Studio is prone to a remote code-execution vulnerability
Show details on source website{
"affected_products": {
"_id": null,
"data": [
{
"_id": null,
"model": "web studio",
"scope": "lte",
"trust": 1.0,
"vendor": "indusoft",
"version": "7.1.3.6"
},
{
"_id": null,
"model": "web studio",
"scope": "eq",
"trust": 0.9,
"vendor": "indusoft",
"version": "7.1.3.6"
},
{
"_id": null,
"model": "indusoft web studio",
"scope": "lt",
"trust": 0.8,
"vendor": "schneider electric",
"version": "8.0"
},
{
"_id": null,
"model": "webstudio",
"scope": null,
"trust": 0.7,
"vendor": "indusoft",
"version": null
},
{
"_id": null,
"model": "electric indusoft web studio remote agent",
"scope": null,
"trust": 0.6,
"vendor": "schneider",
"version": null
},
{
"_id": null,
"model": "web studio",
"scope": "eq",
"trust": 0.3,
"vendor": "indusoft",
"version": "7.0.104"
},
{
"_id": null,
"model": "web studio sp2 p4",
"scope": "eq",
"trust": 0.3,
"vendor": "indusoft",
"version": "7.1"
},
{
"_id": null,
"model": "web studio sp2",
"scope": "eq",
"trust": 0.3,
"vendor": "indusoft",
"version": "7.1"
},
{
"_id": null,
"model": "web studio sp1",
"scope": "eq",
"trust": 0.3,
"vendor": "indusoft",
"version": "7.1"
},
{
"_id": null,
"model": "web studio",
"scope": "eq",
"trust": 0.3,
"vendor": "indusoft",
"version": "7.1"
},
{
"_id": null,
"model": "web studio 7.0b2 hotfix",
"scope": "eq",
"trust": 0.3,
"vendor": "indusoft",
"version": "7.0.01."
},
{
"_id": null,
"model": "web studio 7.0b2",
"scope": null,
"trust": 0.3,
"vendor": "indusoft",
"version": null
},
{
"_id": null,
"model": "web studio",
"scope": "eq",
"trust": 0.3,
"vendor": "indusoft",
"version": "7.0"
},
{
"_id": null,
"model": "web studio",
"scope": "eq",
"trust": 0.3,
"vendor": "indusoft",
"version": "6.1"
},
{
"_id": null,
"model": "web studio",
"scope": "ne",
"trust": 0.3,
"vendor": "indusoft",
"version": "8.0"
},
{
"_id": null,
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "web studio",
"version": "*"
}
],
"sources": [
{
"db": "IVD",
"id": "72899b52-2351-11e6-abef-000c29c66e3d"
},
{
"db": "ZDI",
"id": "ZDI-15-451"
},
{
"db": "CNVD",
"id": "CNVD-2015-06460"
},
{
"db": "BID",
"id": "76864"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-004973"
},
{
"db": "CNNVD",
"id": "CNNVD-201509-550"
},
{
"db": "NVD",
"id": "CVE-2015-7374"
}
]
},
"configurations": {
"_id": null,
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:schneider_electric:indusoft_web_studio",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2015-004973"
}
]
},
"credits": {
"_id": null,
"data": "Steven Seeley of Source Incite",
"sources": [
{
"db": "ZDI",
"id": "ZDI-15-451"
},
{
"db": "BID",
"id": "76864"
}
],
"trust": 1.0
},
"cve": "CVE-2015-7374",
"cvss": {
"_id": null,
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2015-7374",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 2.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2015-06460",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "72899b52-2351-11e6-abef-000c29c66e3d",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.9 [IVD]"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2015-7374",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2015-7374",
"trust": 0.8,
"value": "High"
},
{
"author": "ZDI",
"id": "CVE-2015-7374",
"trust": 0.7,
"value": "HIGH"
},
{
"author": "CNVD",
"id": "CNVD-2015-06460",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201509-550",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "IVD",
"id": "72899b52-2351-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "72899b52-2351-11e6-abef-000c29c66e3d"
},
{
"db": "ZDI",
"id": "ZDI-15-451"
},
{
"db": "CNVD",
"id": "CNVD-2015-06460"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-004973"
},
{
"db": "CNNVD",
"id": "CNNVD-201509-550"
},
{
"db": "NVD",
"id": "CVE-2015-7374"
}
]
},
"description": {
"_id": null,
"data": "The Remote Agent component in Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-2649. Zero Day Initiative Is vulnerable to this vulnerability ZDI-CAN-2649 Was numbered.A third party may execute arbitrary code. User interaction is not required to exploit this vulnerability.The specific flaw exists within the Remote Agent service listening on TCP port 1234. The issue lies in the lack of authentication, allowing attackers to execute remote API calls on the service. The Remote Agent is one of the remote agent components. InduSoft Web Studio is prone to a remote code-execution vulnerability",
"sources": [
{
"db": "NVD",
"id": "CVE-2015-7374"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-004973"
},
{
"db": "ZDI",
"id": "ZDI-15-451"
},
{
"db": "CNVD",
"id": "CNVD-2015-06460"
},
{
"db": "BID",
"id": "76864"
},
{
"db": "IVD",
"id": "72899b52-2351-11e6-abef-000c29c66e3d"
}
],
"trust": 3.24
},
"external_ids": {
"_id": null,
"data": [
{
"db": "NVD",
"id": "CVE-2015-7374",
"trust": 4.2
},
{
"db": "SCHNEIDER",
"id": "SEVD-2015-251-01",
"trust": 2.5
},
{
"db": "ZDI",
"id": "ZDI-15-451",
"trust": 2.0
},
{
"db": "CNVD",
"id": "CNVD-2015-06460",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201509-550",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2015-004973",
"trust": 0.8
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-2649",
"trust": 0.7
},
{
"db": "BID",
"id": "76864",
"trust": 0.3
},
{
"db": "IVD",
"id": "72899B52-2351-11E6-ABEF-000C29C66E3D",
"trust": 0.2
}
],
"sources": [
{
"db": "IVD",
"id": "72899b52-2351-11e6-abef-000c29c66e3d"
},
{
"db": "ZDI",
"id": "ZDI-15-451"
},
{
"db": "CNVD",
"id": "CNVD-2015-06460"
},
{
"db": "BID",
"id": "76864"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-004973"
},
{
"db": "CNNVD",
"id": "CNNVD-201509-550"
},
{
"db": "NVD",
"id": "CVE-2015-7374"
}
]
},
"id": "VAR-201509-0264",
"iot": {
"_id": null,
"data": true,
"sources": [
{
"db": "IVD",
"id": "72899b52-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2015-06460"
}
],
"trust": 1.51113555
},
"iot_taxonomy": {
"_id": null,
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "72899b52-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2015-06460"
}
]
},
"last_update_date": "2024-11-23T21:43:56.305000Z",
"patch": {
"_id": null,
"data": [
{
"title": "SEVD-2015-251-01",
"trust": 0.8,
"url": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-251-01"
},
{
"title": "Indusoft has issued an update to correct this vulnerability.",
"trust": 0.7,
"url": "http://www.schneider-electric.com/ww/en/download/document/SEVD-2015-251-01"
},
{
"title": "Schneider Electric InduSoft Web Studio Remote Agent component code execution vulnerability patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/65016"
},
{
"title": "Schneider Electric InduSoft Web Studio Remote Agent Fixes for component input validation vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=57806"
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-15-451"
},
{
"db": "CNVD",
"id": "CNVD-2015-06460"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-004973"
},
{
"db": "CNNVD",
"id": "CNNVD-201509-550"
}
]
},
"problemtype_data": {
"_id": null,
"data": [
{
"problemtype": "CWE-20",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2015-004973"
},
{
"db": "NVD",
"id": "CVE-2015-7374"
}
]
},
"references": {
"_id": null,
"data": [
{
"trust": 2.2,
"url": "http://download.schneider-electric.com/files?p_doc_ref=sevd-2015-251-01"
},
{
"trust": 1.0,
"url": "http://www.zerodayinitiative.com/advisories/zdi-15-451"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7374"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-7374"
},
{
"trust": 0.7,
"url": "http://www.schneider-electric.com/ww/en/download/document/sevd-2015-251-01"
},
{
"trust": 0.3,
"url": "http://www.indusoft.com/mainpage.php?aricleid=17\u0026type=certified/hardware"
},
{
"trust": 0.3,
"url": "http://download.schneider-electric.com/files?p_reference=sevd-2015-251-01\u0026p_endoctype=brochure\u0026p_file_id=1079944509\u0026p_file_name=sevd-2015-251-01.pdf"
},
{
"trust": 0.3,
"url": "http://www.zerodayinitiative.com/advisories/zdi-15-451/"
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-15-451"
},
{
"db": "CNVD",
"id": "CNVD-2015-06460"
},
{
"db": "BID",
"id": "76864"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-004973"
},
{
"db": "CNNVD",
"id": "CNNVD-201509-550"
},
{
"db": "NVD",
"id": "CVE-2015-7374"
}
]
},
"sources": {
"_id": null,
"data": [
{
"db": "IVD",
"id": "72899b52-2351-11e6-abef-000c29c66e3d",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-15-451",
"ident": null
},
{
"db": "CNVD",
"id": "CNVD-2015-06460",
"ident": null
},
{
"db": "BID",
"id": "76864",
"ident": null
},
{
"db": "JVNDB",
"id": "JVNDB-2015-004973",
"ident": null
},
{
"db": "CNNVD",
"id": "CNNVD-201509-550",
"ident": null
},
{
"db": "NVD",
"id": "CVE-2015-7374",
"ident": null
}
]
},
"sources_release_date": {
"_id": null,
"data": [
{
"date": "2015-10-13T00:00:00",
"db": "IVD",
"id": "72899b52-2351-11e6-abef-000c29c66e3d",
"ident": null
},
{
"date": "2015-09-28T00:00:00",
"db": "ZDI",
"id": "ZDI-15-451",
"ident": null
},
{
"date": "2015-10-13T00:00:00",
"db": "CNVD",
"id": "CNVD-2015-06460",
"ident": null
},
{
"date": "2015-09-28T00:00:00",
"db": "BID",
"id": "76864",
"ident": null
},
{
"date": "2015-09-30T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-004973",
"ident": null
},
{
"date": "2015-09-29T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201509-550",
"ident": null
},
{
"date": "2015-09-25T14:59:00.133000",
"db": "NVD",
"id": "CVE-2015-7374",
"ident": null
}
]
},
"sources_update_date": {
"_id": null,
"data": [
{
"date": "2015-09-28T00:00:00",
"db": "ZDI",
"id": "ZDI-15-451",
"ident": null
},
{
"date": "2015-10-13T00:00:00",
"db": "CNVD",
"id": "CNVD-2015-06460",
"ident": null
},
{
"date": "2015-09-28T00:00:00",
"db": "BID",
"id": "76864",
"ident": null
},
{
"date": "2015-09-30T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-004973",
"ident": null
},
{
"date": "2015-10-09T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201509-550",
"ident": null
},
{
"date": "2024-11-21T02:36:40.837000",
"db": "NVD",
"id": "CVE-2015-7374",
"ident": null
}
]
},
"threat_type": {
"_id": null,
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201509-550"
}
],
"trust": 0.6
},
"title": {
"_id": null,
"data": "Schneider Electric InduSoft Web Studio Remote Agent Component code execution vulnerability",
"sources": [
{
"db": "IVD",
"id": "72899b52-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2015-06460"
}
],
"trust": 0.8
},
"type": {
"_id": null,
"data": "Input validation",
"sources": [
{
"db": "IVD",
"id": "72899b52-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNNVD",
"id": "CNNVD-201509-550"
}
],
"trust": 0.8
}
}
var-201804-1573
Vulnerability from variot
A remote attacker could send a carefully crafted packet in InduSoft Web Studio v8.1 and prior versions, and/or InTouch Machine Edition 2017 v8.1 and prior versions during a tag, alarm, or event related action such as read and write, which may allow remote code execution. InduSoft Web Studio and InTouch Machine Edition 2017 Contains a buffer error vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Schneider Electric InduSoft Web Studio and InTouch Machine Edition are embedded HMI software packages from Schneider Electric, France. The product provides read, write tag and event monitoring for HMI clients. Multiple Schneider Electric Products are prone to a stack-based buffer-overflow vulnerability. Attackers can exploit this issue to execute arbitrary code within the context of the affected device. Failed exploit attempts will likely cause a denial-of-service condition
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201804-1573",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "web studio",
"scope": "lte",
"trust": 1.0,
"vendor": "indusoft",
"version": "8.1"
},
{
"model": "intouch machine edition 2017",
"scope": "lte",
"trust": 1.0,
"vendor": "industrial",
"version": "8.1"
},
{
"model": "intouch machine",
"scope": "lte",
"trust": 0.8,
"vendor": "schneider electric",
"version": "edition 2017 8.1"
},
{
"model": "wonderware indusoft web studio",
"scope": "lte",
"trust": 0.8,
"vendor": "schneider electric",
"version": "8.1"
},
{
"model": "electric indusoft web studio",
"scope": "lte",
"trust": 0.6,
"vendor": "schneider",
"version": "\u003c=8.1"
},
{
"model": "electric intouch machine edition",
"scope": "lte",
"trust": 0.6,
"vendor": "schneider",
"version": "\u003c=20178.1"
},
{
"model": "intouch machine edition 2017",
"scope": "eq",
"trust": 0.6,
"vendor": "industrial",
"version": "8.1"
},
{
"model": "intouch machine edition",
"scope": "eq",
"trust": 0.3,
"vendor": "schneider electric",
"version": "20178.1"
},
{
"model": "indusoft web studio",
"scope": "eq",
"trust": 0.3,
"vendor": "schneider electric",
"version": "8.1"
},
{
"model": "indusoft web studio sp2 patch",
"scope": "eq",
"trust": 0.3,
"vendor": "schneider electric",
"version": "8.01"
},
{
"model": "indusoft web studio sp2",
"scope": "eq",
"trust": 0.3,
"vendor": "schneider electric",
"version": "8.0"
},
{
"model": "indusoft web studio patch",
"scope": "eq",
"trust": 0.3,
"vendor": "schneider electric",
"version": "7.1.3.55"
},
{
"model": "indusoft web studio sp patch",
"scope": "eq",
"trust": 0.3,
"vendor": "schneider electric",
"version": "7.1.3.434"
},
{
"model": "indusoft web studio",
"scope": "eq",
"trust": 0.3,
"vendor": "schneider electric",
"version": "7.1.3.4"
},
{
"model": "indusoft web studio",
"scope": "eq",
"trust": 0.3,
"vendor": "schneider electric",
"version": "7.1.3.2"
},
{
"model": "intouch machine edition sp1",
"scope": "ne",
"trust": 0.3,
"vendor": "schneider electric",
"version": "20178.1"
},
{
"model": "indusoft web studio sp1",
"scope": "ne",
"trust": 0.3,
"vendor": "schneider electric",
"version": "8.1"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "web studio",
"version": "*"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "intouch machine edition 2017",
"version": "*"
}
],
"sources": [
{
"db": "IVD",
"id": "e2ed3ca0-39ab-11e9-a805-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-08447"
},
{
"db": "BID",
"id": "103949"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-004280"
},
{
"db": "CNNVD",
"id": "CNNVD-201804-821"
},
{
"db": "NVD",
"id": "CVE-2018-8840"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:schneider_electric:wonderware_intouch",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:schneider_electric:wonderware_indusoft_web_studio",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-004280"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Tenable Research",
"sources": [
{
"db": "BID",
"id": "103949"
}
],
"trust": 0.3
},
"cve": "CVE-2018-8840",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CVE-2018-8840",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.9,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CNVD-2018-08447",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "e2ed3ca0-39ab-11e9-a805-000c29342cb1",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.9 [IVD]"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2018-8840",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2018-8840",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "NVD",
"id": "CVE-2018-8840",
"trust": 0.8,
"value": "Critical"
},
{
"author": "CNVD",
"id": "CNVD-2018-08447",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201804-821",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "IVD",
"id": "e2ed3ca0-39ab-11e9-a805-000c29342cb1",
"trust": 0.2,
"value": "CRITICAL"
},
{
"author": "VULMON",
"id": "CVE-2018-8840",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "e2ed3ca0-39ab-11e9-a805-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-08447"
},
{
"db": "VULMON",
"id": "CVE-2018-8840"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-004280"
},
{
"db": "CNNVD",
"id": "CNNVD-201804-821"
},
{
"db": "NVD",
"id": "CVE-2018-8840"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "A remote attacker could send a carefully crafted packet in InduSoft Web Studio v8.1 and prior versions, and/or InTouch Machine Edition 2017 v8.1 and prior versions during a tag, alarm, or event related action such as read and write, which may allow remote code execution. InduSoft Web Studio and InTouch Machine Edition 2017 Contains a buffer error vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Schneider Electric InduSoft Web Studio and InTouch Machine Edition are embedded HMI software packages from Schneider Electric, France. The product provides read, write tag and event monitoring for HMI clients. Multiple Schneider Electric Products are prone to a stack-based buffer-overflow vulnerability. \nAttackers can exploit this issue to execute arbitrary code within the context of the affected device. Failed exploit attempts will likely cause a denial-of-service condition",
"sources": [
{
"db": "NVD",
"id": "CVE-2018-8840"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-004280"
},
{
"db": "CNVD",
"id": "CNVD-2018-08447"
},
{
"db": "BID",
"id": "103949"
},
{
"db": "IVD",
"id": "e2ed3ca0-39ab-11e9-a805-000c29342cb1"
},
{
"db": "VULMON",
"id": "CVE-2018-8840"
}
],
"trust": 2.7
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2018-8840",
"trust": 3.6
},
{
"db": "ICS CERT",
"id": "ICSA-18-107-01",
"trust": 3.4
},
{
"db": "BID",
"id": "103949",
"trust": 2.0
},
{
"db": "TENABLE",
"id": "TRA-2018-07",
"trust": 1.7
},
{
"db": "CNVD",
"id": "CNVD-2018-08447",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201804-821",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2018-004280",
"trust": 0.8
},
{
"db": "IVD",
"id": "E2ED3CA0-39AB-11E9-A805-000C29342CB1",
"trust": 0.2
},
{
"db": "VULMON",
"id": "CVE-2018-8840",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "e2ed3ca0-39ab-11e9-a805-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-08447"
},
{
"db": "VULMON",
"id": "CVE-2018-8840"
},
{
"db": "BID",
"id": "103949"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-004280"
},
{
"db": "CNNVD",
"id": "CNNVD-201804-821"
},
{
"db": "NVD",
"id": "CVE-2018-8840"
}
]
},
"id": "VAR-201804-1573",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "e2ed3ca0-39ab-11e9-a805-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-08447"
}
],
"trust": 1.53946735
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "e2ed3ca0-39ab-11e9-a805-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-08447"
}
]
},
"last_update_date": "2024-11-23T22:30:27.419000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Wonderware InduSoft Web Studio",
"trust": 0.8,
"url": "http://www.indusoft.com/Marketing/Article/ArtMID/684/ArticleID/667/Introduction-to-Wonderware-InduSoft-Web-Studio"
},
{
"title": "Wonderware InTouch Machine Edition",
"trust": 0.8,
"url": "https://www.wonderware.com/hmi-scada/intouch-machine-edition/?utm_source=situation-awareness.com\u0026utm_medium=situation-awareness.com"
},
{
"title": "Patch for Schneider Electric InduSoft Web Studio and InTouch Machine Editiony Buffer Overflow Vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/127447"
},
{
"title": "Schneider Electric InduSoft Web Studio and InTouch Machine Edition Buffer error vulnerability fix",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=80186"
},
{
"title": "Threatpost",
"trust": 0.1,
"url": "https://threatpost.com/schneider-electric-patches-critical-rce-vulnerability/131610/"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-08447"
},
{
"db": "VULMON",
"id": "CVE-2018-8840"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-004280"
},
{
"db": "CNNVD",
"id": "CNNVD-201804-821"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-119",
"trust": 1.8
},
{
"problemtype": "CWE-121",
"trust": 1.0
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-004280"
},
{
"db": "NVD",
"id": "CVE-2018-8840"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.5,
"url": "https://ics-cert.us-cert.gov/advisories/icsa-18-107-01"
},
{
"trust": 1.8,
"url": "http://www.securityfocus.com/bid/103949"
},
{
"trust": 1.7,
"url": "http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000125/"
},
{
"trust": 1.7,
"url": "https://www.tenable.com/security/research/tra-2018-07"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-8840"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-8840"
},
{
"trust": 0.3,
"url": "http://www.schneider-electric.com/site/home/index.cfm/ww/?selectcountry=true"
},
{
"trust": 0.3,
"url": "http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000125/%20"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/119.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://threatpost.com/schneider-electric-patches-critical-rce-vulnerability/131610/"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-08447"
},
{
"db": "VULMON",
"id": "CVE-2018-8840"
},
{
"db": "BID",
"id": "103949"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-004280"
},
{
"db": "CNNVD",
"id": "CNNVD-201804-821"
},
{
"db": "NVD",
"id": "CVE-2018-8840"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "e2ed3ca0-39ab-11e9-a805-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-08447"
},
{
"db": "VULMON",
"id": "CVE-2018-8840"
},
{
"db": "BID",
"id": "103949"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-004280"
},
{
"db": "CNNVD",
"id": "CNNVD-201804-821"
},
{
"db": "NVD",
"id": "CVE-2018-8840"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-04-26T00:00:00",
"db": "IVD",
"id": "e2ed3ca0-39ab-11e9-a805-000c29342cb1"
},
{
"date": "2018-04-26T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-08447"
},
{
"date": "2018-04-18T00:00:00",
"db": "VULMON",
"id": "CVE-2018-8840"
},
{
"date": "2018-04-17T00:00:00",
"db": "BID",
"id": "103949"
},
{
"date": "2018-06-15T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-004280"
},
{
"date": "2018-04-18T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201804-821"
},
{
"date": "2018-04-18T20:29:00.920000",
"db": "NVD",
"id": "CVE-2018-8840"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-04-26T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-08447"
},
{
"date": "2019-10-09T00:00:00",
"db": "VULMON",
"id": "CVE-2018-8840"
},
{
"date": "2018-04-17T00:00:00",
"db": "BID",
"id": "103949"
},
{
"date": "2018-06-15T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-004280"
},
{
"date": "2019-10-17T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201804-821"
},
{
"date": "2024-11-21T04:14:25.670000",
"db": "NVD",
"id": "CVE-2018-8840"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201804-821"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "InduSoft Web Studio and InTouch Machine Edition 2017 Buffer error vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-004280"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Buffer error",
"sources": [
{
"db": "IVD",
"id": "e2ed3ca0-39ab-11e9-a805-000c29342cb1"
},
{
"db": "CNNVD",
"id": "CNNVD-201804-821"
}
],
"trust": 0.8
}
}
var-201112-0149
Vulnerability from variot
CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows remote attackers to execute arbitrary code via vectors related to creation of a file, loading a DLL, and process control. Authentication is not required to exploit this vulnerability.The flaw exists within the Remote Agent component (CEServer.exe) which listens by default on TCP port 4322. When handling incoming requests the process fails to perform any type of authentication. InduSoft Web Studio is a powerful and complete graphics control software that includes tools for developing Human Machine Interface (HMI), Management Control, Data Acquisition System (SCADA) and embedded control. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
ZDI-11-330 : InduSoft WebStudio Unauthenticated Remote Operations Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-330 November 16, 2011
-
-- CVE ID: CVE-2011-4051
-
-- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C
-
-- Affected Vendors:
Indusoft
- -- Affected Products:
Indusoft WebStudio
-
-- TippingPoint(TM) IPS Customer Protection: TippingPoint IPS customers have been protected against this vulnerability by Digital Vaccine protection filter ID 11473. Authentication is not required to exploit this vulnerability.
-
-- Vendor Response:
Indusoft has issued an update to correct this vulnerability. More details can be found at:
http://www.indusoft.com/hotfixes/hotfixes.php
-
-- Disclosure Timeline: 2011-04-27 - Vulnerability reported to vendor 2011-11-16 - Coordinated public release of advisory
-
-- Credit: This vulnerability was discovered by:
-
Luigi Auriemma
-
-- About the Zero Day Initiative (ZDI): Established by TippingPoint, The Zero Day Initiative (ZDI) represents a best-of-breed model for rewarding security researchers for responsibly disclosing discovered vulnerabilities.
Researchers interested in getting paid for their security research through the ZDI can find more information and sign-up at:
http://www.zerodayinitiative.com
The ZDI is unique in how the acquired vulnerability information is used. Instead, upon notifying the affected product vendor, TippingPoint provides its customers with zero day protection through its intrusion prevention technology. Explicit details regarding the specifics of the vulnerability are not exposed to any parties until an official vendor patch is publicly available. Furthermore, with the altruistic aim of helping to secure a broader user base, TippingPoint provides this vulnerability information confidentially to security vendors (including competitors) who have a vulnerability protection or mitigation product.
Our vulnerability disclosure policy is available online at:
http://www.zerodayinitiative.com/advisories/disclosure_policy/
Follow the ZDI on Twitter:
http://twitter.com/thezdi
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.17 (MingW32)
iQEcBAEBAgAGBQJOw/QMAAoJEFVtgMGTo1sc8v0IAJk2gKvTpcirXBUMyNtvwDAN 042nyN5QUvS31Litol+BSykbe1rAaozIAoePXdk3b3TrRLA8I94oasct2iyZ0HOy 0fySTePXckdm1+F606LqV3++wkcr0YmuX1rUeQcZNbuY0Pna0kySt66vKjPnjIsF 4aSBEWayFl2Oc/ja4UCw3vnvLQzqM4XETc5mAsMaNk5SEAyHuwNGSpjdqf9VYygj MoO2uRL3H8FMPQOAtPNF3PO9EoYUUx/SIV6Gv6pGgvnKZ/le7pnBdFTGXq94iCUt Vo3QvLF8x/C+3vTr1Mw0HafzvW0uUuG8SI8h9j+LIl7jc8Q+K4wVusB8egBlj0Q= =1X8g -----END PGP SIGNATURE-----
Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/ . ----------------------------------------------------------------------
Secunia is hiring!
Find your next job here:
http://secunia.com/company/jobs/
TITLE: InduSoft Web Studio CEServer Security Bypass and Buffer Overflow Vulnerabilities
SECUNIA ADVISORY ID: SA46871
VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/46871/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=46871
RELEASE DATE: 2011-11-16
DISCUSS ADVISORY: http://secunia.com/advisories/46871/#comments
AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s)
http://secunia.com/advisories/46871/
ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS
https://ca.secunia.com/?page=viewadvisory&vuln_id=46871
ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING
http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/
DESCRIPTION: A security issue and a vulnerability have been reported in InduSoft Web Studio, which can be exploited by malicious people to bypass certain security restrictions and compromise a vulnerable system.
2) A boundary error within the remote agent component (CEServer.exe) when handling the remove file operation (0x15) can be exploited to cause a stack-based buffer overflow.
The security issue and the vulnerability are reported in versions prior to 7.0 Service Pack 1 Patch 1.
SOLUTION: Apply Service Pack 1 Patch 1.
PROVIDED AND/OR DISCOVERED BY: The vendor credits Luigi Auriemma via ZDI.
ORIGINAL ADVISORY: InduSoft: http://www.indusoft.com/hotfixes/hotfixes.php
ICS-CERT: http://www.us-cert.gov/control_systems/pdf/ICSA-11-319-01.pdf
OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/advisories/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201112-0149",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "web studio",
"scope": "eq",
"trust": 2.5,
"vendor": "indusoft",
"version": "6.1"
},
{
"model": "web studio",
"scope": "eq",
"trust": 2.5,
"vendor": "indusoft",
"version": "7.0"
},
{
"model": "web studio 7.0b2",
"scope": null,
"trust": 0.9,
"vendor": "indusoft",
"version": null
},
{
"model": "web studio",
"scope": "eq",
"trust": 0.9,
"vendor": "indusoft",
"version": "7.0.104"
},
{
"model": "web studio 7.0b2 hotfix",
"scope": "eq",
"trust": 0.9,
"vendor": "indusoft",
"version": "7.0.01."
},
{
"model": "thin client",
"scope": "eq",
"trust": 0.9,
"vendor": "indusoft",
"version": "7.0"
},
{
"model": "indusoft web studio",
"scope": "eq",
"trust": 0.8,
"vendor": "schneider electric",
"version": "6.1"
},
{
"model": "indusoft web studio",
"scope": "eq",
"trust": 0.8,
"vendor": "schneider electric",
"version": "7.0"
},
{
"model": "webstudio",
"scope": null,
"trust": 0.7,
"vendor": "indusoft",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "web studio",
"version": "6.1"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "web studio",
"version": "7.0"
}
],
"sources": [
{
"db": "IVD",
"id": "596a7eea-2354-11e6-abef-000c29c66e3d"
},
{
"db": "ZDI",
"id": "ZDI-11-330"
},
{
"db": "CNVD",
"id": "CNVD-2011-4895"
},
{
"db": "BID",
"id": "50675"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003191"
},
{
"db": "CNNVD",
"id": "CNNVD-201111-303"
},
{
"db": "NVD",
"id": "CVE-2011-4051"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:schneider_electric:indusoft_web_studio",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2011-003191"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Luigi Aurieema work with Zero Day Initiative",
"sources": [
{
"db": "BID",
"id": "50675"
},
{
"db": "CNNVD",
"id": "CNNVD-201111-303"
}
],
"trust": 0.9
},
"cve": "CVE-2011-4051",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CVE-2011-4051",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "ZDI",
"availabilityImpact": "COMPLETE",
"baseScore": 9.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2011-4051",
"impactScore": 8.5,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "HIGH",
"trust": 0.7,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "596a7eea-2354-11e6-abef-000c29c66e3d",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.9 [IVD]"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2011-4051",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2011-4051",
"trust": 0.8,
"value": "High"
},
{
"author": "ZDI",
"id": "CVE-2011-4051",
"trust": 0.7,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201111-303",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "IVD",
"id": "596a7eea-2354-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "CRITICAL"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "596a7eea-2354-11e6-abef-000c29c66e3d"
},
{
"db": "ZDI",
"id": "ZDI-11-330"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003191"
},
{
"db": "CNNVD",
"id": "CNNVD-201111-303"
},
{
"db": "NVD",
"id": "CVE-2011-4051"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows remote attackers to execute arbitrary code via vectors related to creation of a file, loading a DLL, and process control. Authentication is not required to exploit this vulnerability.The flaw exists within the Remote Agent component (CEServer.exe) which listens by default on TCP port 4322. When handling incoming requests the process fails to perform any type of authentication. InduSoft Web Studio is a powerful and complete graphics control software that includes tools for developing Human Machine Interface (HMI), Management Control, Data Acquisition System (SCADA) and embedded control. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\nZDI-11-330 : InduSoft WebStudio Unauthenticated Remote Operations\nRemote Code Execution Vulnerability\nhttp://www.zerodayinitiative.com/advisories/ZDI-11-330\nNovember 16, 2011\n\n- -- CVE ID:\nCVE-2011-4051\n\n- -- CVSS:\n9, AV:N/AC:L/Au:N/C:P/I:P/A:C\n\n- -- Affected Vendors:\n\nIndusoft\n\n\n\n- -- Affected Products:\n\nIndusoft WebStudio\n\n\n\n- -- TippingPoint(TM) IPS Customer Protection:\nTippingPoint IPS customers have been protected against this\nvulnerability by Digital Vaccine protection filter ID 11473. Authentication is not\nrequired to exploit this vulnerability. \n\n- -- Vendor Response:\n\nIndusoft has issued an update to correct this vulnerability. More\ndetails can be found at:\n\nhttp://www.indusoft.com/hotfixes/hotfixes.php\n\n\n\n- -- Disclosure Timeline:\n2011-04-27 - Vulnerability reported to vendor\n2011-11-16 - Coordinated public release of advisory\n\n- -- Credit:\nThis vulnerability was discovered by:\n\n* Luigi Auriemma\n\n\n\n- -- About the Zero Day Initiative (ZDI):\nEstablished by TippingPoint, The Zero Day Initiative (ZDI) represents\na best-of-breed model for rewarding security researchers for responsibly\ndisclosing discovered vulnerabilities. \n\nResearchers interested in getting paid for their security research\nthrough the ZDI can find more information and sign-up at:\n\n http://www.zerodayinitiative.com\n\nThe ZDI is unique in how the acquired vulnerability information is\nused. Instead, upon notifying the affected product vendor,\nTippingPoint provides its customers with zero day protection through\nits intrusion prevention technology. Explicit details regarding the\nspecifics of the vulnerability are not exposed to any parties until\nan official vendor patch is publicly available. Furthermore, with the\naltruistic aim of helping to secure a broader user base, TippingPoint\nprovides this vulnerability information confidentially to security\nvendors (including competitors) who have a vulnerability protection or\nmitigation product. \n\nOur vulnerability disclosure policy is available online at:\n\n http://www.zerodayinitiative.com/advisories/disclosure_policy/\n\nFollow the ZDI on Twitter:\n\n http://twitter.com/thezdi\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v2.0.17 (MingW32)\n\niQEcBAEBAgAGBQJOw/QMAAoJEFVtgMGTo1sc8v0IAJk2gKvTpcirXBUMyNtvwDAN\n042nyN5QUvS31Litol+BSykbe1rAaozIAoePXdk3b3TrRLA8I94oasct2iyZ0HOy\n0fySTePXckdm1+F606LqV3++wkcr0YmuX1rUeQcZNbuY0Pna0kySt66vKjPnjIsF\n4aSBEWayFl2Oc/ja4UCw3vnvLQzqM4XETc5mAsMaNk5SEAyHuwNGSpjdqf9VYygj\nMoO2uRL3H8FMPQOAtPNF3PO9EoYUUx/SIV6Gv6pGgvnKZ/le7pnBdFTGXq94iCUt\nVo3QvLF8x/C+3vTr1Mw0HafzvW0uUuG8SI8h9j+LIl7jc8Q+K4wVusB8egBlj0Q=\n=1X8g\n-----END PGP SIGNATURE-----\n\n_______________________________________________\nFull-Disclosure - We believe in it. \nCharter: http://lists.grok.org.uk/full-disclosure-charter.html\nHosted and sponsored by Secunia - http://secunia.com/\n. ----------------------------------------------------------------------\n\nSecunia is hiring!\n\nFind your next job here:\n\nhttp://secunia.com/company/jobs/\n\n----------------------------------------------------------------------\n\nTITLE:\nInduSoft Web Studio CEServer Security Bypass and Buffer Overflow\nVulnerabilities\n\nSECUNIA ADVISORY ID:\nSA46871\n\nVERIFY ADVISORY:\nSecunia.com\nhttp://secunia.com/advisories/46871/\nCustomer Area (Credentials Required)\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=46871\n\nRELEASE DATE:\n2011-11-16\n\nDISCUSS ADVISORY:\nhttp://secunia.com/advisories/46871/#comments\n\nAVAILABLE ON SITE AND IN CUSTOMER AREA:\n * Last Update\n * Popularity\n * Comments\n * Criticality Level\n * Impact\n * Where\n * Solution Status\n * Operating System / Software\n * CVE Reference(s)\n\nhttp://secunia.com/advisories/46871/\n\nONLY AVAILABLE IN CUSTOMER AREA:\n * Authentication Level\n * Report Reliability\n * Secunia PoC\n * Secunia Analysis\n * Systems Affected\n * Approve Distribution\n * Remediation Status\n * Secunia CVSS Score\n * CVSS\n\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=46871\n\nONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI:\n * AUTOMATED SCANNING\n\nhttp://secunia.com/vulnerability_scanning/personal/\nhttp://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/\n\nDESCRIPTION:\nA security issue and a vulnerability have been reported in InduSoft\nWeb Studio, which can be exploited by malicious people to bypass\ncertain security restrictions and compromise a vulnerable system. \n\n2) A boundary error within the remote agent component (CEServer.exe)\nwhen handling the remove file operation (0x15) can be exploited to\ncause a stack-based buffer overflow. \n\nThe security issue and the vulnerability are reported in versions\nprior to 7.0 Service Pack 1 Patch 1. \n\nSOLUTION:\nApply Service Pack 1 Patch 1. \n\nPROVIDED AND/OR DISCOVERED BY:\nThe vendor credits Luigi Auriemma via ZDI. \n\nORIGINAL ADVISORY:\nInduSoft:\nhttp://www.indusoft.com/hotfixes/hotfixes.php\n\nICS-CERT:\nhttp://www.us-cert.gov/control_systems/pdf/ICSA-11-319-01.pdf\n\nOTHER REFERENCES:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nDEEP LINKS:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXTENDED DESCRIPTION:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXTENDED SOLUTION:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXPLOIT:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\nprivate users keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2011-4051"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003191"
},
{
"db": "ZDI",
"id": "ZDI-11-330"
},
{
"db": "CNVD",
"id": "CNVD-2011-4895"
},
{
"db": "BID",
"id": "50675"
},
{
"db": "IVD",
"id": "596a7eea-2354-11e6-abef-000c29c66e3d"
},
{
"db": "PACKETSTORM",
"id": "107052"
},
{
"db": "PACKETSTORM",
"id": "107058"
},
{
"db": "PACKETSTORM",
"id": "107059"
}
],
"trust": 3.51
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2011-4051",
"trust": 4.3
},
{
"db": "ICS CERT",
"id": "ICSA-11-319-01",
"trust": 3.5
},
{
"db": "ZDI",
"id": "ZDI-11-330",
"trust": 2.7
},
{
"db": "BID",
"id": "50675",
"trust": 0.9
},
{
"db": "CNVD",
"id": "CNVD-2011-4895",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201111-303",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003191",
"trust": 0.8
},
{
"db": "SECUNIA",
"id": "46875",
"trust": 0.8
},
{
"db": "SECUNIA",
"id": "46871",
"trust": 0.8
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-1181",
"trust": 0.7
},
{
"db": "NSFOCUS",
"id": "18188",
"trust": 0.6
},
{
"db": "IVD",
"id": "596A7EEA-2354-11E6-ABEF-000C29C66E3D",
"trust": 0.2
},
{
"db": "PACKETSTORM",
"id": "107052",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "107058",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "107059",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "596a7eea-2354-11e6-abef-000c29c66e3d"
},
{
"db": "ZDI",
"id": "ZDI-11-330"
},
{
"db": "CNVD",
"id": "CNVD-2011-4895"
},
{
"db": "BID",
"id": "50675"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003191"
},
{
"db": "PACKETSTORM",
"id": "107052"
},
{
"db": "PACKETSTORM",
"id": "107058"
},
{
"db": "PACKETSTORM",
"id": "107059"
},
{
"db": "CNNVD",
"id": "CNNVD-201111-303"
},
{
"db": "NVD",
"id": "CVE-2011-4051"
}
]
},
"id": "VAR-201112-0149",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "596a7eea-2354-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2011-4895"
}
],
"trust": 1.459052225
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "596a7eea-2354-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2011-4895"
}
]
},
"last_update_date": "2024-11-23T23:06:27.709000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Distributors",
"trust": 0.8,
"url": "http://www.indusoft.com/Partners/Distributors/International-Distributors?_id=86\u0026country=Japan\u0026abb=jp"
},
{
"title": "Download Products and Documents",
"trust": 0.8,
"url": "http://www.indusoft.com/Products-Downloads/HMI-SCADA-Software/InduSoft-Web-Studio?string=\u0026name=IWS%2fwebstudio"
},
{
"title": "Security Updates and Hotfixes",
"trust": 0.8,
"url": "http://www.indusoft.com/Login?returnurl=%2fProducts-Downloads%2fSecurity-Hotfix-Updates"
},
{
"title": "Indusoft has issued an update to correct this vulnerability.",
"trust": 0.7,
"url": "http://www.indusoft.com/hotfixes/hotfixes.php"
},
{
"title": "InduSoft Web Studio \u0027CEServer\u0027 patch for remote code execution vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/5918"
},
{
"title": "IWS70.1.1only",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=41939"
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-11-330"
},
{
"db": "CNVD",
"id": "CNVD-2011-4895"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003191"
},
{
"db": "CNNVD",
"id": "CNNVD-201111-303"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-287",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2011-003191"
},
{
"db": "NVD",
"id": "CVE-2011-4051"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.5,
"url": "http://www.us-cert.gov/control_systems/pdf/icsa-11-319-01.pdf"
},
{
"trust": 2.6,
"url": "http://www.indusoft.com/hotfixes/hotfixes.php"
},
{
"trust": 1.6,
"url": "http://www.zerodayinitiative.com/advisories/zdi-11-330/"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-4051"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-4051"
},
{
"trust": 0.6,
"url": "http://secunia.com/advisories/46871"
},
{
"trust": 0.6,
"url": "http://secunia.com/advisories/46875"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/bid/50675"
},
{
"trust": 0.6,
"url": "http://www.nsfocus.net/vulndb/18188"
},
{
"trust": 0.4,
"url": "//www.zerodayinitiative.com/advisories/zdi-11-330"
},
{
"trust": 0.3,
"url": "http://www.indusoft.com/mainpage.php?aricleid=17\u0026type=certified/hardware"
},
{
"trust": 0.2,
"url": "http://secunia.com/company/jobs/"
},
{
"trust": 0.2,
"url": "http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/"
},
{
"trust": 0.2,
"url": "http://secunia.com/vulnerability_intelligence/"
},
{
"trust": 0.2,
"url": "http://secunia.com/advisories/secunia_security_advisories/"
},
{
"trust": 0.2,
"url": "http://secunia.com/vulnerability_scanning/personal/"
},
{
"trust": 0.2,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.2,
"url": "http://secunia.com/advisories/about_secunia_advisories/"
},
{
"trust": 0.1,
"url": "http://www.zerodayinitiative.com/advisories/disclosure_policy/"
},
{
"trust": 0.1,
"url": "http://secunia.com/"
},
{
"trust": 0.1,
"url": "http://twitter.com/thezdi"
},
{
"trust": 0.1,
"url": "http://www.tippingpoint.com"
},
{
"trust": 0.1,
"url": "http://www.zerodayinitiative.com"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-4051"
},
{
"trust": 0.1,
"url": "http://lists.grok.org.uk/full-disclosure-charter.html"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/46875/#comments"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/46875/"
},
{
"trust": 0.1,
"url": "https://ca.secunia.com/?page=viewadvisory\u0026vuln_id=46875"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/46871/#comments"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/46871/"
},
{
"trust": 0.1,
"url": "https://ca.secunia.com/?page=viewadvisory\u0026vuln_id=46871"
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-11-330"
},
{
"db": "CNVD",
"id": "CNVD-2011-4895"
},
{
"db": "BID",
"id": "50675"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003191"
},
{
"db": "PACKETSTORM",
"id": "107052"
},
{
"db": "PACKETSTORM",
"id": "107058"
},
{
"db": "PACKETSTORM",
"id": "107059"
},
{
"db": "CNNVD",
"id": "CNNVD-201111-303"
},
{
"db": "NVD",
"id": "CVE-2011-4051"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "596a7eea-2354-11e6-abef-000c29c66e3d"
},
{
"db": "ZDI",
"id": "ZDI-11-330"
},
{
"db": "CNVD",
"id": "CNVD-2011-4895"
},
{
"db": "BID",
"id": "50675"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003191"
},
{
"db": "PACKETSTORM",
"id": "107052"
},
{
"db": "PACKETSTORM",
"id": "107058"
},
{
"db": "PACKETSTORM",
"id": "107059"
},
{
"db": "CNNVD",
"id": "CNNVD-201111-303"
},
{
"db": "NVD",
"id": "CVE-2011-4051"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2011-11-16T00:00:00",
"db": "IVD",
"id": "596a7eea-2354-11e6-abef-000c29c66e3d"
},
{
"date": "2011-11-16T00:00:00",
"db": "ZDI",
"id": "ZDI-11-330"
},
{
"date": "2011-11-16T00:00:00",
"db": "CNVD",
"id": "CNVD-2011-4895"
},
{
"date": "2011-11-15T00:00:00",
"db": "BID",
"id": "50675"
},
{
"date": "2011-12-06T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2011-003191"
},
{
"date": "2011-11-17T02:34:57",
"db": "PACKETSTORM",
"id": "107052"
},
{
"date": "2011-11-16T09:29:22",
"db": "PACKETSTORM",
"id": "107058"
},
{
"date": "2011-11-16T09:29:25",
"db": "PACKETSTORM",
"id": "107059"
},
{
"date": "1900-01-01T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201111-303"
},
{
"date": "2011-12-05T11:55:06.600000",
"db": "NVD",
"id": "CVE-2011-4051"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2011-11-16T00:00:00",
"db": "ZDI",
"id": "ZDI-11-330"
},
{
"date": "2011-11-16T00:00:00",
"db": "CNVD",
"id": "CNVD-2011-4895"
},
{
"date": "2012-10-04T10:30:00",
"db": "BID",
"id": "50675"
},
{
"date": "2012-02-03T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2011-003191"
},
{
"date": "2011-12-12T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201111-303"
},
{
"date": "2024-11-21T01:31:45.700000",
"db": "NVD",
"id": "CVE-2011-4051"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "PACKETSTORM",
"id": "107052"
},
{
"db": "CNNVD",
"id": "CNNVD-201111-303"
}
],
"trust": 0.7
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "InduSoft Web Studio \u0027CEServer\u0027 Remote code execution vulnerability",
"sources": [
{
"db": "IVD",
"id": "596a7eea-2354-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2011-4895"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "authorization issue",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201111-303"
}
],
"trust": 0.6
}
}
var-201105-0156
Vulnerability from variot
Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6 61.6.01.05, InduSoft Web Studio before 7.0+SP1, and InduSoft Thin Client 7.0, allow remote attackers to execute arbitrary code via a long (1) InternationalOrder, (2) InternationalSeparator, or (3) LogFileName property value; or (4) a long bstrFileName argument to the OpenScreen method. Overly long to method bstrFileName argument. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Indusoft Thin Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within ISSymbol.ocx ActiveX component. When an overly large string is passed as the 'InternationalOrder' parameter, a heap overflow occurs. This vulnerability can be leveraged to execute code under the context of the user running the browser. InduSoft Web Studio is a powerful and complete graphics control software that includes the various functional modules required to develop Human Machine Interface (HMI), Management Control, Data Acquisition System (SCADA) and embedded control. The Advantech Studio ISSymbol ActiveX control handles boundary errors in the \"InternationalSeparator\" property. The Advantech Studio ISSymbol ActiveX control is prone to multiple buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied input. Failed exploit attempts will likely result in denial-of-service conditions. Advantech Studio 6.1 SP6 Build 61.6.01.05 is vulnerable; other versions may also be affected. There are multiple buffer overflow vulnerabilities in InduSoft ISSymbol ActiveX control 6.1 SP6 Build 61.6.01.05 (ISSymbol.ocx 61.6.0.0) and other versions. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
ZDI-12-155 : InduSoft Thin Client ISSymbol InternationalOrder Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-155 August 22, 2012
-
-- CVE ID: CVE-2011-0340
-
-- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P
-
-- Affected Vendors: Indusoft
-
-- Affected Products: Indusoft WebStudio
-
-- TippingPoint(TM) IPS Customer Protection: TippingPoint IPS customers have been protected against this vulnerability by Digital Vaccine protection filter ID 12505.
-
-- Vendor Response: Indusoft has issued an update to correct this vulnerability. More details can be found at: http://www.indusoft.com/hotfixes/hotfixes.php
-
-- Disclosure Timeline: 2011-10-28 - Vulnerability reported to vendor 2012-08-22 - Coordinated public release of advisory
-
-- Credit: This vulnerability was discovered by:
-
Alexander Gavrun
-
-- About the Zero Day Initiative (ZDI): Established by TippingPoint, The Zero Day Initiative (ZDI) represents a best-of-breed model for rewarding security researchers for responsibly disclosing discovered vulnerabilities.
Researchers interested in getting paid for their security research through the ZDI can find more information and sign-up at:
http://www.zerodayinitiative.com
The ZDI is unique in how the acquired vulnerability information is used. TippingPoint does not re-sell the vulnerability details or any exploit code. Instead, upon notifying the affected product vendor, TippingPoint provides its customers with zero day protection through its intrusion prevention technology. Explicit details regarding the specifics of the vulnerability are not exposed to any parties until an official vendor patch is publicly available. Furthermore, with the altruistic aim of helping to secure a broader user base, TippingPoint provides this vulnerability information confidentially to security vendors (including competitors) who have a vulnerability protection or mitigation product.
Our vulnerability disclosure policy is available online at:
http://www.zerodayinitiative.com/advisories/disclosure_policy/
Follow the ZDI on Twitter:
http://twitter.com/thezdi
-----BEGIN PGP SIGNATURE----- Version: PGP Desktop 10.2.0 (Build 1950) Charset: utf-8
wsBVAwUBUDUFHFVtgMGTo1scAQJ1Twf8C0MRiovFv7JVpAgg+lOYT3HW7MYdUKAx /I+4hvkGyeKKCCkvIOkx0y7eSdwp4paxVZAd0WYTfsG0K1h+bBngt6m+3Nicx0Iq YuqyOluJTW4ymXUSwvX8MZ39709DQXEl5yp9JvIX+Dc4WY7TKauGYKIfbb/VRMQq VYgQPhnlv8laGORlVREpu+yrOPdYLbQSucewpaLXd4b8uw1+Kmurjepiil5vxqPD G3fD23i1jGrbg6aX0AlvECo1M12alERft7wjtI21D7VP7G3uBYwiAJ8jxutavMQY Yf5K6rzdbx+96MuFco7aYB49GBQDpMYvWeWur3YEv1GqR7bSotpO1Q== =Yxrq -----END PGP SIGNATURE-----
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201105-0156",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "thin client",
"scope": "eq",
"trust": 3.7,
"vendor": "indusoft",
"version": "7.0"
},
{
"model": "web studio 7.0b2",
"scope": null,
"trust": 2.7,
"vendor": "indusoft",
"version": null
},
{
"model": "studio sp6 build",
"scope": "eq",
"trust": 2.7,
"vendor": "advantech",
"version": "6.161.6.0"
},
{
"model": null,
"scope": "eq",
"trust": 1.6,
"vendor": "web studio",
"version": "6.1"
},
{
"model": "web studio",
"scope": "eq",
"trust": 1.6,
"vendor": "indusoft",
"version": "6.1"
},
{
"model": "webstudio",
"scope": null,
"trust": 1.4,
"vendor": "indusoft",
"version": null
},
{
"model": "web studio",
"scope": "lte",
"trust": 1.0,
"vendor": "indusoft",
"version": "7.0"
},
{
"model": "studio",
"scope": "eq",
"trust": 1.0,
"vendor": "advantech",
"version": "6.1"
},
{
"model": null,
"scope": "eq",
"trust": 0.8,
"vendor": "advantech studio",
"version": "6.1"
},
{
"model": null,
"scope": "eq",
"trust": 0.8,
"vendor": "thin client",
"version": "7.0"
},
{
"model": null,
"scope": "eq",
"trust": 0.8,
"vendor": "web studio",
"version": "*"
},
{
"model": "indusoft web studio",
"scope": "lt",
"trust": 0.8,
"vendor": "schneider electric",
"version": "7.0+sp1"
},
{
"model": "thin client",
"scope": "eq",
"trust": 0.8,
"vendor": "schneider electric",
"version": "7.0"
},
{
"model": "studio",
"scope": "eq",
"trust": 0.8,
"vendor": "advantech",
"version": "6.1:sp6_61.6.01.05"
},
{
"model": "web studio",
"scope": "ne",
"trust": 0.3,
"vendor": "indusoft",
"version": "7.0.104"
},
{
"model": "studio",
"scope": "ne",
"trust": 0.3,
"vendor": "advantech",
"version": "7.0"
}
],
"sources": [
{
"db": "IVD",
"id": "03126d9a-2355-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "0a3c1e31-e21b-43a6-bc03-7b31c6d49349"
},
{
"db": "IVD",
"id": "b3a31758-1f96-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "d282dd20-1f96-11e6-abef-000c29c66e3d"
},
{
"db": "ZDI",
"id": "ZDI-12-155"
},
{
"db": "ZDI",
"id": "ZDI-12-168"
},
{
"db": "CNVD",
"id": "CNVD-2011-1637"
},
{
"db": "CNVD",
"id": "CNVD-2011-1636"
},
{
"db": "CNVD",
"id": "CNVD-2011-1634"
},
{
"db": "CNVD",
"id": "CNVD-2011-1635"
},
{
"db": "BID",
"id": "47596"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004090"
},
{
"db": "CNNVD",
"id": "CNNVD-201104-318"
},
{
"db": "NVD",
"id": "CVE-2011-0340"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:schneider_electric:indusoft_web_studio",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:schneider_electric:thin_client",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:advantech:advantech_studio",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2011-004090"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Alexander Gavrun",
"sources": [
{
"db": "ZDI",
"id": "ZDI-12-155"
},
{
"db": "ZDI",
"id": "ZDI-12-168"
}
],
"trust": 1.4
},
"cve": "CVE-2011-0340",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"id": "CVE-2011-0340",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "ZDI",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2011-0340",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "HIGH",
"trust": 1.4,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"id": "03126d9a-2355-11e6-abef-000c29c66e3d",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"id": "0a3c1e31-e21b-43a6-bc03-7b31c6d49349",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"id": "b3a31758-1f96-11e6-abef-000c29c66e3d",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"id": "d282dd20-1f96-11e6-abef-000c29c66e3d",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"id": "VHN-48285",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "ZDI",
"id": "CVE-2011-0340",
"trust": 1.4,
"value": "HIGH"
},
{
"author": "nvd@nist.gov",
"id": "CVE-2011-0340",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2011-0340",
"trust": 0.8,
"value": "High"
},
{
"author": "CNNVD",
"id": "CNNVD-201104-318",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "IVD",
"id": "03126d9a-2355-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "CRITICAL"
},
{
"author": "IVD",
"id": "0a3c1e31-e21b-43a6-bc03-7b31c6d49349",
"trust": 0.2,
"value": "CRITICAL"
},
{
"author": "IVD",
"id": "b3a31758-1f96-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "CRITICAL"
},
{
"author": "IVD",
"id": "d282dd20-1f96-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-48285",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "03126d9a-2355-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "0a3c1e31-e21b-43a6-bc03-7b31c6d49349"
},
{
"db": "IVD",
"id": "b3a31758-1f96-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "d282dd20-1f96-11e6-abef-000c29c66e3d"
},
{
"db": "ZDI",
"id": "ZDI-12-155"
},
{
"db": "ZDI",
"id": "ZDI-12-168"
},
{
"db": "VULHUB",
"id": "VHN-48285"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004090"
},
{
"db": "CNNVD",
"id": "CNNVD-201104-318"
},
{
"db": "NVD",
"id": "CVE-2011-0340"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6 61.6.01.05, InduSoft Web Studio before 7.0+SP1, and InduSoft Thin Client 7.0, allow remote attackers to execute arbitrary code via a long (1) InternationalOrder, (2) InternationalSeparator, or (3) LogFileName property value; or (4) a long bstrFileName argument to the OpenScreen method. Overly long to method bstrFileName argument. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Indusoft Thin Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within ISSymbol.ocx ActiveX component. When an overly large string is passed as the \u0027InternationalOrder\u0027 parameter, a heap overflow occurs. This vulnerability can be leveraged to execute code under the context of the user running the browser. InduSoft Web Studio is a powerful and complete graphics control software that includes the various functional modules required to develop Human Machine Interface (HMI), Management Control, Data Acquisition System (SCADA) and embedded control. The Advantech Studio ISSymbol ActiveX control handles boundary errors in the \\\"InternationalSeparator\\\" property. The Advantech Studio ISSymbol ActiveX control is prone to multiple buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied input. Failed exploit attempts will likely result in denial-of-service conditions. \nAdvantech Studio 6.1 SP6 Build 61.6.01.05 is vulnerable; other versions may also be affected. There are multiple buffer overflow vulnerabilities in InduSoft ISSymbol ActiveX control 6.1 SP6 Build 61.6.01.05 (ISSymbol.ocx 61.6.0.0) and other versions. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\nZDI-12-155 : InduSoft Thin Client ISSymbol InternationalOrder Remote Code\nExecution Vulnerability\nhttp://www.zerodayinitiative.com/advisories/ZDI-12-155\nAugust 22, 2012\n\n- -- CVE ID:\nCVE-2011-0340\n\n- -- CVSS:\n7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P\n\n- -- Affected Vendors:\nIndusoft\n\n- -- Affected Products:\nIndusoft WebStudio\n\n- -- TippingPoint(TM) IPS Customer Protection:\nTippingPoint IPS customers have been protected against this\nvulnerability by Digital Vaccine protection filter ID 12505. \n\n- -- Vendor Response:\nIndusoft has issued an update to correct this vulnerability. More details\ncan be found at:\nhttp://www.indusoft.com/hotfixes/hotfixes.php\n\n- -- Disclosure Timeline:\n2011-10-28 - Vulnerability reported to vendor\n2012-08-22 - Coordinated public release of advisory\n\n- -- Credit:\nThis vulnerability was discovered by:\n* Alexander Gavrun\n\n\n- -- About the Zero Day Initiative (ZDI):\nEstablished by TippingPoint, The Zero Day Initiative (ZDI) represents \na best-of-breed model for rewarding security researchers for responsibly\ndisclosing discovered vulnerabilities. \n\nResearchers interested in getting paid for their security research\nthrough the ZDI can find more information and sign-up at:\n\n http://www.zerodayinitiative.com\n\nThe ZDI is unique in how the acquired vulnerability information is\nused. TippingPoint does not re-sell the vulnerability details or any\nexploit code. Instead, upon notifying the affected product vendor,\nTippingPoint provides its customers with zero day protection through\nits intrusion prevention technology. Explicit details regarding the\nspecifics of the vulnerability are not exposed to any parties until\nan official vendor patch is publicly available. Furthermore, with the\naltruistic aim of helping to secure a broader user base, TippingPoint\nprovides this vulnerability information confidentially to security\nvendors (including competitors) who have a vulnerability protection or\nmitigation product. \n\nOur vulnerability disclosure policy is available online at:\n\n http://www.zerodayinitiative.com/advisories/disclosure_policy/\n\nFollow the ZDI on Twitter:\n\n http://twitter.com/thezdi\n\n-----BEGIN PGP SIGNATURE-----\nVersion: PGP Desktop 10.2.0 (Build 1950)\nCharset: utf-8\n\nwsBVAwUBUDUFHFVtgMGTo1scAQJ1Twf8C0MRiovFv7JVpAgg+lOYT3HW7MYdUKAx\n/I+4hvkGyeKKCCkvIOkx0y7eSdwp4paxVZAd0WYTfsG0K1h+bBngt6m+3Nicx0Iq\nYuqyOluJTW4ymXUSwvX8MZ39709DQXEl5yp9JvIX+Dc4WY7TKauGYKIfbb/VRMQq\nVYgQPhnlv8laGORlVREpu+yrOPdYLbQSucewpaLXd4b8uw1+Kmurjepiil5vxqPD\nG3fD23i1jGrbg6aX0AlvECo1M12alERft7wjtI21D7VP7G3uBYwiAJ8jxutavMQY\nYf5K6rzdbx+96MuFco7aYB49GBQDpMYvWeWur3YEv1GqR7bSotpO1Q==\n=Yxrq\n-----END PGP SIGNATURE-----\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2011-0340"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004090"
},
{
"db": "ZDI",
"id": "ZDI-12-155"
},
{
"db": "ZDI",
"id": "ZDI-12-168"
},
{
"db": "CNVD",
"id": "CNVD-2011-1637"
},
{
"db": "CNVD",
"id": "CNVD-2011-1636"
},
{
"db": "CNVD",
"id": "CNVD-2011-1634"
},
{
"db": "CNVD",
"id": "CNVD-2011-1635"
},
{
"db": "BID",
"id": "47596"
},
{
"db": "IVD",
"id": "03126d9a-2355-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "0a3c1e31-e21b-43a6-bc03-7b31c6d49349"
},
{
"db": "IVD",
"id": "b3a31758-1f96-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "d282dd20-1f96-11e6-abef-000c29c66e3d"
},
{
"db": "VULHUB",
"id": "VHN-48285"
},
{
"db": "PACKETSTORM",
"id": "115807"
}
],
"trust": 6.21
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-48285",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-48285"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2011-0340",
"trust": 7.5
},
{
"db": "ICS CERT",
"id": "ICSA-12-137-02",
"trust": 2.2
},
{
"db": "ICS CERT",
"id": "ICSA-12-249-03",
"trust": 1.9
},
{
"db": "SECUNIA",
"id": "43116",
"trust": 1.7
},
{
"db": "CNNVD",
"id": "CNNVD-201104-318",
"trust": 1.5
},
{
"db": "BID",
"id": "47596",
"trust": 1.4
},
{
"db": "SECUNIA",
"id": "42928",
"trust": 1.1
},
{
"db": "VUPEN",
"id": "ADV-2011-1115",
"trust": 1.1
},
{
"db": "VUPEN",
"id": "ADV-2011-1116",
"trust": 1.1
},
{
"db": "CNVD",
"id": "CNVD-2011-1635",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2011-1637",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2011-1634",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2011-1636",
"trust": 0.8
},
{
"db": "ZDI",
"id": "ZDI-12-155",
"trust": 0.8
},
{
"db": "ICS CERT",
"id": "ICSA-11-168-01A",
"trust": 0.8
},
{
"db": "ICS CERT ALERT",
"id": "ICS-ALERT-11-131-01",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004090",
"trust": 0.8
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-1341",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-1342",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-12-168",
"trust": 0.7
},
{
"db": "NSFOCUS",
"id": "17594",
"trust": 0.6
},
{
"db": "ICS CERT ALERT",
"id": "ICS-ALERT-11-230-01",
"trust": 0.3
},
{
"db": "IVD",
"id": "03126D9A-2355-11E6-ABEF-000C29C66E3D",
"trust": 0.2
},
{
"db": "IVD",
"id": "0A3C1E31-E21B-43A6-BC03-7B31C6D49349",
"trust": 0.2
},
{
"db": "IVD",
"id": "B3A31758-1F96-11E6-ABEF-000C29C66E3D",
"trust": 0.2
},
{
"db": "IVD",
"id": "D282DD20-1F96-11E6-ABEF-000C29C66E3D",
"trust": 0.2
},
{
"db": "PACKETSTORM",
"id": "115807",
"trust": 0.2
},
{
"db": "PACKETSTORM",
"id": "115995",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "118932",
"trust": 0.1
},
{
"db": "SEEBUG",
"id": "SSVID-77261",
"trust": 0.1
},
{
"db": "EXPLOIT-DB",
"id": "23500",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-48285",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "03126d9a-2355-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "0a3c1e31-e21b-43a6-bc03-7b31c6d49349"
},
{
"db": "IVD",
"id": "b3a31758-1f96-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "d282dd20-1f96-11e6-abef-000c29c66e3d"
},
{
"db": "ZDI",
"id": "ZDI-12-155"
},
{
"db": "ZDI",
"id": "ZDI-12-168"
},
{
"db": "CNVD",
"id": "CNVD-2011-1637"
},
{
"db": "CNVD",
"id": "CNVD-2011-1636"
},
{
"db": "CNVD",
"id": "CNVD-2011-1634"
},
{
"db": "CNVD",
"id": "CNVD-2011-1635"
},
{
"db": "VULHUB",
"id": "VHN-48285"
},
{
"db": "BID",
"id": "47596"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004090"
},
{
"db": "PACKETSTORM",
"id": "115807"
},
{
"db": "CNNVD",
"id": "CNNVD-201104-318"
},
{
"db": "NVD",
"id": "CVE-2011-0340"
}
]
},
"id": "VAR-201105-0156",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "03126d9a-2355-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "0a3c1e31-e21b-43a6-bc03-7b31c6d49349"
},
{
"db": "IVD",
"id": "b3a31758-1f96-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "d282dd20-1f96-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2011-1637"
},
{
"db": "CNVD",
"id": "CNVD-2011-1636"
},
{
"db": "CNVD",
"id": "CNVD-2011-1634"
},
{
"db": "CNVD",
"id": "CNVD-2011-1635"
},
{
"db": "VULHUB",
"id": "VHN-48285"
}
],
"trust": 3.9850195599999996
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 3.2
}
],
"sources": [
{
"db": "IVD",
"id": "03126d9a-2355-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "0a3c1e31-e21b-43a6-bc03-7b31c6d49349"
},
{
"db": "IVD",
"id": "b3a31758-1f96-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "d282dd20-1f96-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2011-1637"
},
{
"db": "CNVD",
"id": "CNVD-2011-1636"
},
{
"db": "CNVD",
"id": "CNVD-2011-1634"
},
{
"db": "CNVD",
"id": "CNVD-2011-1635"
}
]
},
"last_update_date": "2024-11-29T22:59:31.553000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Indusoft has issued an update to correct this vulnerability.",
"trust": 1.4,
"url": "http://www.indusoft.com/hotfixes/hotfixes.php"
},
{
"title": "Top Page",
"trust": 0.8,
"url": "http://www.advantech.com/products/"
},
{
"title": "Advantech Studio ISSymbol ActiveX Buffer Overflow",
"trust": 0.8,
"url": "http://www.advantechdirect.com/eMarketingPrograms/AStudio_Patch/AStudio7.0_Patch_Final.htm"
},
{
"title": "Security Updates and Hotfixes",
"trust": 0.8,
"url": "http://www.indusoft.com/Login?returnurl=%2fProducts-Downloads%2fSecurity-Hotfix-Updates"
},
{
"title": "Advantech Studio ISSymbol ActiveX control has a patch for border vulnerabilities when creating log files",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/3696"
},
{
"title": "Advantech Studio ISSymbol ActiveX control handles patches for boundary violations in some windows processes",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/3695"
},
{
"title": "Advantech Studio ISSymbol ActiveX Control Processing",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/3693"
},
{
"title": "Advantech Studio ISSymbol ActiveX control handles the \\\"InternationalSeparator\\\" attribute with a border vulnerability patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/3694"
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-12-155"
},
{
"db": "ZDI",
"id": "ZDI-12-168"
},
{
"db": "CNVD",
"id": "CNVD-2011-1637"
},
{
"db": "CNVD",
"id": "CNVD-2011-1636"
},
{
"db": "CNVD",
"id": "CNVD-2011-1634"
},
{
"db": "CNVD",
"id": "CNVD-2011-1635"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004090"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-119",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-48285"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004090"
},
{
"db": "NVD",
"id": "CVE-2011-0340"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.5,
"url": "http://www.indusoft.com/hotfixes/hotfixes.php"
},
{
"trust": 2.4,
"url": "http://secunia.com/secunia_research/2011-37/http"
},
{
"trust": 2.2,
"url": "http://www.us-cert.gov/control_systems/pdf/icsa-12-137-02.pdf"
},
{
"trust": 1.9,
"url": "http://ics-cert.us-cert.gov/advisories/icsa-12-249-03"
},
{
"trust": 1.7,
"url": "http://secunia.com/secunia_research/2011-36/"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/43116"
},
{
"trust": 1.4,
"url": "http://secunia.com/secunia_research/2011-37/"
},
{
"trust": 1.1,
"url": "http://www.securityfocus.com/bid/47596"
},
{
"trust": 1.1,
"url": "http://www.advantechdirect.com/emarketingprograms/astudio_patch/astudio7.0_patch_final.htm"
},
{
"trust": 1.1,
"url": "http://secunia.com/advisories/42928"
},
{
"trust": 1.1,
"url": "http://www.vupen.com/english/advisories/2011/1115"
},
{
"trust": 1.1,
"url": "http://www.vupen.com/english/advisories/2011/1116"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-0340"
},
{
"trust": 0.8,
"url": "http://www.us-cert.gov/control_systems/pdf/icsa-11-168-01a.pdf"
},
{
"trust": 0.8,
"url": "http://www.us-cert.gov/control_systems/pdf/ics-alert-11-131-01.pdf"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-0340"
},
{
"trust": 0.6,
"url": "http://www.nsfocus.net/vulndb/17594"
},
{
"trust": 0.3,
"url": "http://www.advantech.com/products/advantech-studio/mod_3d1b45b0-b0af-405c-a9cc-a27b35774634.aspx"
},
{
"trust": 0.3,
"url": "http://www.indusoft.com/indusoftart.php?catid=1\u0026name=iws/webstudio"
},
{
"trust": 0.3,
"url": "http://www.us-cert.gov/control_systems/pdf/ics-alert-11-230-01.pdf"
},
{
"trust": 0.1,
"url": "http://www.zerodayinitiative.com/advisories/disclosure_policy/"
},
{
"trust": 0.1,
"url": "http://www.zerodayinitiative.com/advisories/zdi-12-155"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-0340"
},
{
"trust": 0.1,
"url": "http://twitter.com/thezdi"
},
{
"trust": 0.1,
"url": "http://www.tippingpoint.com"
},
{
"trust": 0.1,
"url": "http://www.zerodayinitiative.com"
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-12-155"
},
{
"db": "ZDI",
"id": "ZDI-12-168"
},
{
"db": "CNVD",
"id": "CNVD-2011-1637"
},
{
"db": "CNVD",
"id": "CNVD-2011-1636"
},
{
"db": "CNVD",
"id": "CNVD-2011-1634"
},
{
"db": "CNVD",
"id": "CNVD-2011-1635"
},
{
"db": "VULHUB",
"id": "VHN-48285"
},
{
"db": "BID",
"id": "47596"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004090"
},
{
"db": "PACKETSTORM",
"id": "115807"
},
{
"db": "CNNVD",
"id": "CNNVD-201104-318"
},
{
"db": "NVD",
"id": "CVE-2011-0340"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "03126d9a-2355-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "0a3c1e31-e21b-43a6-bc03-7b31c6d49349"
},
{
"db": "IVD",
"id": "b3a31758-1f96-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "d282dd20-1f96-11e6-abef-000c29c66e3d"
},
{
"db": "ZDI",
"id": "ZDI-12-155"
},
{
"db": "ZDI",
"id": "ZDI-12-168"
},
{
"db": "CNVD",
"id": "CNVD-2011-1637"
},
{
"db": "CNVD",
"id": "CNVD-2011-1636"
},
{
"db": "CNVD",
"id": "CNVD-2011-1634"
},
{
"db": "CNVD",
"id": "CNVD-2011-1635"
},
{
"db": "VULHUB",
"id": "VHN-48285"
},
{
"db": "BID",
"id": "47596"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004090"
},
{
"db": "PACKETSTORM",
"id": "115807"
},
{
"db": "CNNVD",
"id": "CNNVD-201104-318"
},
{
"db": "NVD",
"id": "CVE-2011-0340"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2011-04-28T00:00:00",
"db": "IVD",
"id": "03126d9a-2355-11e6-abef-000c29c66e3d"
},
{
"date": "2011-04-28T00:00:00",
"db": "IVD",
"id": "0a3c1e31-e21b-43a6-bc03-7b31c6d49349"
},
{
"date": "2011-04-28T00:00:00",
"db": "IVD",
"id": "b3a31758-1f96-11e6-abef-000c29c66e3d"
},
{
"date": "2011-04-28T00:00:00",
"db": "IVD",
"id": "d282dd20-1f96-11e6-abef-000c29c66e3d"
},
{
"date": "2012-08-22T00:00:00",
"db": "ZDI",
"id": "ZDI-12-155"
},
{
"date": "2012-08-29T00:00:00",
"db": "ZDI",
"id": "ZDI-12-168"
},
{
"date": "2011-04-28T00:00:00",
"db": "CNVD",
"id": "CNVD-2011-1637"
},
{
"date": "2011-04-28T00:00:00",
"db": "CNVD",
"id": "CNVD-2011-1636"
},
{
"date": "2011-04-28T00:00:00",
"db": "CNVD",
"id": "CNVD-2011-1634"
},
{
"date": "2011-04-28T00:00:00",
"db": "CNVD",
"id": "CNVD-2011-1635"
},
{
"date": "2011-05-04T00:00:00",
"db": "VULHUB",
"id": "VHN-48285"
},
{
"date": "2011-04-27T00:00:00",
"db": "BID",
"id": "47596"
},
{
"date": "2012-03-27T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2011-004090"
},
{
"date": "2012-08-23T02:40:38",
"db": "PACKETSTORM",
"id": "115807"
},
{
"date": "2011-04-28T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201104-318"
},
{
"date": "2011-05-04T22:55:01.467000",
"db": "NVD",
"id": "CVE-2011-0340"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2012-08-22T00:00:00",
"db": "ZDI",
"id": "ZDI-12-155"
},
{
"date": "2012-08-29T00:00:00",
"db": "ZDI",
"id": "ZDI-12-168"
},
{
"date": "2011-04-28T00:00:00",
"db": "CNVD",
"id": "CNVD-2011-1637"
},
{
"date": "2011-04-28T00:00:00",
"db": "CNVD",
"id": "CNVD-2011-1636"
},
{
"date": "2011-04-28T00:00:00",
"db": "CNVD",
"id": "CNVD-2011-1634"
},
{
"date": "2011-04-28T00:00:00",
"db": "CNVD",
"id": "CNVD-2011-1635"
},
{
"date": "2013-05-21T00:00:00",
"db": "VULHUB",
"id": "VHN-48285"
},
{
"date": "2013-04-02T15:57:00",
"db": "BID",
"id": "47596"
},
{
"date": "2016-04-06T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2011-004090"
},
{
"date": "2011-05-06T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201104-318"
},
{
"date": "2024-11-21T01:23:46.210000",
"db": "NVD",
"id": "CVE-2011-0340"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "PACKETSTORM",
"id": "115807"
},
{
"db": "CNNVD",
"id": "CNNVD-201104-318"
}
],
"trust": 0.7
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "ISSymbol Virtual machine ISSymbol ActiveX Control buffer overflow vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2011-004090"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Buffer overflow",
"sources": [
{
"db": "IVD",
"id": "03126d9a-2355-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "0a3c1e31-e21b-43a6-bc03-7b31c6d49349"
},
{
"db": "IVD",
"id": "b3a31758-1f96-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "d282dd20-1f96-11e6-abef-000c29c66e3d"
},
{
"db": "CNNVD",
"id": "CNNVD-201104-318"
}
],
"trust": 1.4
}
}
var-201109-0060
Vulnerability from variot
Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 allow remote attackers to execute arbitrary code via a long parameter to the (1) Open, (2) Close, or (3) SetCurrentLanguage method. InduSoft ISSymbol ActiveX Control has a buffer overflow vulnerability. Due to boundary condition errors when processing 'Open()', 'Close()' and 'SetCurrentLanguage()' methods, it can be exploited by an attacker to cause a buffer overflow. Failed exploit attempts will likely result in denial-of-service conditions.
====================================================================== 2) Severity
Rating: Highly critical Impact: System access Where: Remote
====================================================================== 3) Vendor's Description of Software
"InduSoft Web Studio is a powerful collection of automation tools that provide all the automation building blocks to develop HMIs, SCADA systems and embedded instrumentation solutions. Utilize InduSoft integrated Web technologies to take advantage of Internet/intranet connectivity."
Link: http://www.indusoft.com/indusoftart.php?catid=1&name=IWS/webstudio
====================================================================== 4) Description of Vulnerability
Secunia Research has discovered multiple vulnerabilities in InduSoft ISSymbol ActiveX control, which can be exploited by malicious people to compromise a user's system.
Successful exploitation of the vulnerabilities allows execution of arbitrary code.
====================================================================== 5) Solution
Install Service Pack 1.
====================================================================== 6) Time Table
09/06/2011 - Vendor notified 15/06/2011 - Vendor response. 30/08/2011 - Vendor releases a hotfix. 01/09/2011 - Public disclosure.
====================================================================== 7) Credits
Discovered by Dmitriy Pletnev, Secunia Research.
====================================================================== 8) References
The Common Vulnerabilities and Exposures (CVE) project has assigned CVE-2011-0342 for the vulnerabilities.
====================================================================== 9) About Secunia
Secunia offers vulnerability management solutions to corporate customers with verified and reliable vulnerability intelligence relevant to their specific system configuration:
http://secunia.com/advisories/business_solutions/
Secunia also provides a publicly accessible and comprehensive advisory database as a service to the security community and private individuals, who are interested in or concerned about IT-security.
http://secunia.com/advisories/
Secunia believes that it is important to support the community and to do active vulnerability research in order to aid improving the security and reliability of software in general:
http://secunia.com/secunia_research/
Secunia regularly hires new skilled team members. Check the URL below to see currently vacant positions:
http://secunia.com/corporate/jobs/
Secunia offers a FREE mailing list called Secunia Security Advisories:
http://secunia.com/advisories/mailing_lists/
====================================================================== 10) Verification
Please verify this advisory by visiting the Secunia website: http://secunia.com/secunia_research/2011-61/
Complete list of vulnerability reports published by Secunia Research: http://secunia.com/secunia_research/
====================================================================== . ----------------------------------------------------------------------
The Secunia CSI 5.0 Beta - now available for testing Find out more, take a free test drive, and share your opinion with us: http://secunia.com/blog/242
TITLE: InduSoft ISSymbol ActiveX Control Multiple Buffer Overflow Vulnerabilities
SECUNIA ADVISORY ID: SA44875
VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/44875/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=44875
RELEASE DATE: 2011-09-02
DISCUSS ADVISORY: http://secunia.com/advisories/44875/#comments
AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s)
http://secunia.com/advisories/44875/
ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS
https://ca.secunia.com/?page=viewadvisory&vuln_id=44875
ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING
http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/
DESCRIPTION: Secunia Research has discovered multiple vulnerabilities in InduSoft ISSymbol ActiveX control, which can be exploited by malicious people to compromise a user's system.
The vulnerabilities are confirmed in ISSymbol.ocx version 301.1104.601.0 included in InduSoft Web Studio version 7.0B2 hotfix 7.0.01.04.
ORIGINAL ADVISORY: Secunia Research: http://secunia.com/secunia_research/2011-61/
InduSoft: http://www.indusoft.com/hotfixes/hotfixes.php
OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/
About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/advisories/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201109-0060",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "web studio",
"scope": "eq",
"trust": 1.6,
"vendor": "indusoft",
"version": "7.0b2"
},
{
"model": "indusoft web studio",
"scope": "eq",
"trust": 0.8,
"vendor": "schneider electric",
"version": "7.0b2 hotfix 7.0.01.04"
},
{
"model": "issymbol activex control",
"scope": null,
"trust": 0.6,
"vendor": "indusoft",
"version": null
},
{
"model": "web studio 7.0b2 hotfix",
"scope": "eq",
"trust": 0.6,
"vendor": "indusoft",
"version": "7.0.01.04"
},
{
"model": "web studio 7.0b2 hotfix",
"scope": "eq",
"trust": 0.3,
"vendor": "indusoft",
"version": "7.0.01."
},
{
"model": "issymbol activex control",
"scope": "eq",
"trust": 0.3,
"vendor": "indusoft",
"version": "301.1104.601.0"
},
{
"model": "7.0b2",
"scope": null,
"trust": 0.2,
"vendor": "web studio",
"version": null
}
],
"sources": [
{
"db": "IVD",
"id": "adacdf98-2354-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2011-3474"
},
{
"db": "BID",
"id": "49403"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004092"
},
{
"db": "CNNVD",
"id": "CNNVD-201108-538"
},
{
"db": "NVD",
"id": "CVE-2011-0342"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:schneider_electric:indusoft_web_studio",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2011-004092"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Dmitriy Pletnev, Secunia Research.",
"sources": [
{
"db": "BID",
"id": "49403"
}
],
"trust": 0.3
},
"cve": "CVE-2011-0342",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CVE-2011-0342",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "adacdf98-2354-11e6-abef-000c29c66e3d",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.9 [IVD]"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2011-0342",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2011-0342",
"trust": 0.8,
"value": "High"
},
{
"author": "CNNVD",
"id": "CNNVD-201108-538",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "IVD",
"id": "adacdf98-2354-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "CRITICAL"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "adacdf98-2354-11e6-abef-000c29c66e3d"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004092"
},
{
"db": "CNNVD",
"id": "CNNVD-201108-538"
},
{
"db": "NVD",
"id": "CVE-2011-0342"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 allow remote attackers to execute arbitrary code via a long parameter to the (1) Open, (2) Close, or (3) SetCurrentLanguage method. InduSoft ISSymbol ActiveX Control has a buffer overflow vulnerability. Due to boundary condition errors when processing \u0027Open()\u0027, \u0027Close()\u0027 and \u0027SetCurrentLanguage()\u0027 methods, it can be exploited by an attacker to cause a buffer overflow. Failed exploit attempts will likely result in denial-of-service conditions. \n\n====================================================================== \n2) Severity \n\nRating: Highly critical\nImpact: System access\nWhere: Remote\n\n====================================================================== \n3) Vendor\u0027s Description of Software \n\n\"InduSoft Web Studio is a powerful collection of automation tools that\nprovide all the automation building blocks to develop HMIs, SCADA \nsystems and embedded instrumentation solutions. Utilize InduSoft \nintegrated Web technologies to take advantage of Internet/intranet \nconnectivity.\"\n\nLink:\nhttp://www.indusoft.com/indusoftart.php?catid=1\u0026name=IWS/webstudio\n\n====================================================================== \n4) Description of Vulnerability\n\nSecunia Research has discovered multiple vulnerabilities in InduSoft\nISSymbol ActiveX control, which can be exploited by malicious people \nto compromise a user\u0027s system. \n\nSuccessful exploitation of the vulnerabilities allows execution of\narbitrary code. \n\n====================================================================== \n5) Solution \n\nInstall Service Pack 1. \n\n====================================================================== \n6) Time Table \n\n09/06/2011 - Vendor notified\n15/06/2011 - Vendor response. \n30/08/2011 - Vendor releases a hotfix. \n01/09/2011 - Public disclosure. \n\n====================================================================== \n7) Credits \n\nDiscovered by Dmitriy Pletnev, Secunia Research. \n\n====================================================================== \n8) References\n\nThe Common Vulnerabilities and Exposures (CVE) project has assigned\nCVE-2011-0342 for the vulnerabilities. \n\n====================================================================== \n9) About Secunia\n\nSecunia offers vulnerability management solutions to corporate\ncustomers with verified and reliable vulnerability intelligence\nrelevant to their specific system configuration:\n\nhttp://secunia.com/advisories/business_solutions/\n\nSecunia also provides a publicly accessible and comprehensive advisory\ndatabase as a service to the security community and private \nindividuals, who are interested in or concerned about IT-security. \n\nhttp://secunia.com/advisories/\n\nSecunia believes that it is important to support the community and to\ndo active vulnerability research in order to aid improving the \nsecurity and reliability of software in general:\n\nhttp://secunia.com/secunia_research/\n\nSecunia regularly hires new skilled team members. Check the URL below\nto see currently vacant positions:\n\nhttp://secunia.com/corporate/jobs/\n\nSecunia offers a FREE mailing list called Secunia Security Advisories:\n\nhttp://secunia.com/advisories/mailing_lists/\n\n====================================================================== \n10) Verification \n\nPlease verify this advisory by visiting the Secunia website:\nhttp://secunia.com/secunia_research/2011-61/\n\nComplete list of vulnerability reports published by Secunia Research:\nhttp://secunia.com/secunia_research/\n\n======================================================================\n. ----------------------------------------------------------------------\n\nThe Secunia CSI 5.0 Beta - now available for testing\nFind out more, take a free test drive, and share your opinion with us: \nhttp://secunia.com/blog/242 \n\n----------------------------------------------------------------------\n\nTITLE:\nInduSoft ISSymbol ActiveX Control Multiple Buffer Overflow\nVulnerabilities\n\nSECUNIA ADVISORY ID:\nSA44875\n\nVERIFY ADVISORY:\nSecunia.com\nhttp://secunia.com/advisories/44875/\nCustomer Area (Credentials Required)\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=44875\n\nRELEASE DATE:\n2011-09-02\n\nDISCUSS ADVISORY:\nhttp://secunia.com/advisories/44875/#comments\n\nAVAILABLE ON SITE AND IN CUSTOMER AREA:\n * Last Update\n * Popularity\n * Comments\n * Criticality Level\n * Impact\n * Where\n * Solution Status\n * Operating System / Software\n * CVE Reference(s)\n\nhttp://secunia.com/advisories/44875/\n\nONLY AVAILABLE IN CUSTOMER AREA:\n * Authentication Level\n * Report Reliability\n * Secunia PoC\n * Secunia Analysis\n * Systems Affected\n * Approve Distribution\n * Remediation Status\n * Secunia CVSS Score\n * CVSS\n\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=44875\n\nONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI:\n * AUTOMATED SCANNING\n\nhttp://secunia.com/vulnerability_scanning/personal/\nhttp://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/\n\nDESCRIPTION:\nSecunia Research has discovered multiple vulnerabilities in InduSoft\nISSymbol ActiveX control, which can be exploited by malicious people\nto compromise a user\u0027s system. \n\nThe vulnerabilities are confirmed in ISSymbol.ocx version\n301.1104.601.0 included in InduSoft Web Studio version 7.0B2 hotfix\n7.0.01.04. \n\nORIGINAL ADVISORY:\nSecunia Research:\nhttp://secunia.com/secunia_research/2011-61/\n\nInduSoft:\nhttp://www.indusoft.com/hotfixes/hotfixes.php\n\nOTHER REFERENCES:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nDEEP LINKS:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXTENDED DESCRIPTION:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXTENDED SOLUTION:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXPLOIT:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\nprivate users keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2011-0342"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004092"
},
{
"db": "CNVD",
"id": "CNVD-2011-3474"
},
{
"db": "BID",
"id": "49403"
},
{
"db": "IVD",
"id": "adacdf98-2354-11e6-abef-000c29c66e3d"
},
{
"db": "PACKETSTORM",
"id": "104681"
},
{
"db": "PACKETSTORM",
"id": "104720"
}
],
"trust": 2.79
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2011-0342",
"trust": 3.6
},
{
"db": "SECUNIA",
"id": "44875",
"trust": 2.3
},
{
"db": "ICS CERT",
"id": "ICSA-11-273-02",
"trust": 2.1
},
{
"db": "BID",
"id": "49403",
"trust": 1.9
},
{
"db": "CNVD",
"id": "CNVD-2011-3474",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201108-538",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004092",
"trust": 0.8
},
{
"db": "NSFOCUS",
"id": "17665",
"trust": 0.6
},
{
"db": "IVD",
"id": "ADACDF98-2354-11E6-ABEF-000C29C66E3D",
"trust": 0.2
},
{
"db": "PACKETSTORM",
"id": "104681",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "104720",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "adacdf98-2354-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2011-3474"
},
{
"db": "BID",
"id": "49403"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004092"
},
{
"db": "PACKETSTORM",
"id": "104681"
},
{
"db": "PACKETSTORM",
"id": "104720"
},
{
"db": "CNNVD",
"id": "CNNVD-201108-538"
},
{
"db": "NVD",
"id": "CVE-2011-0342"
}
]
},
"id": "VAR-201109-0060",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "adacdf98-2354-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2011-3474"
}
],
"trust": 1.44863555
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "adacdf98-2354-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2011-3474"
}
]
},
"last_update_date": "2024-11-23T22:49:44.870000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Security Updates and Hotfixes",
"trust": 0.8,
"url": "http://www.indusoft.com/Login?returnurl=%2fProducts-Downloads%2fSecurity-Hotfix-Updates"
},
{
"title": "InduSoft ISSymbol ActiveX Control Buffer Overflow Vulnerability Patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/4979"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2011-3474"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004092"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-119",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2011-004092"
},
{
"db": "NVD",
"id": "CVE-2011-0342"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.1,
"url": "http://secunia.com/secunia_research/2011-61/"
},
{
"trust": 2.0,
"url": "http://www.indusoft.com/hotfixes/hotfixes.php"
},
{
"trust": 1.6,
"url": "http://www.securityfocus.com/bid/49403"
},
{
"trust": 1.6,
"url": "http://secunia.com/advisories/44875"
},
{
"trust": 1.1,
"url": "http://www.us-cert.gov/control_systems/pdf/icsa-11-273-02.pdf"
},
{
"trust": 1.0,
"url": "http://ics-cert.us-cert.gov/advisories/icsa-11-273-02"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-0342"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-0342"
},
{
"trust": 0.7,
"url": "http://secunia.com/advisories/44875/"
},
{
"trust": 0.6,
"url": "http://www.nsfocus.net/vulndb/17665"
},
{
"trust": 0.3,
"url": "http://www.indusoft.com/"
},
{
"trust": 0.1,
"url": "http://www.indusoft.com/indusoftart.php?catid=1\u0026name=iws/webstudio"
},
{
"trust": 0.1,
"url": "http://secunia.com/secunia_research/"
},
{
"trust": 0.1,
"url": "http://secunia.com/corporate/jobs/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/mailing_lists/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/business_solutions/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-0342"
},
{
"trust": 0.1,
"url": "http://secunia.com/blog/242"
},
{
"trust": 0.1,
"url": "http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/"
},
{
"trust": 0.1,
"url": "http://secunia.com/vulnerability_intelligence/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/secunia_security_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/44875/#comments"
},
{
"trust": 0.1,
"url": "http://secunia.com/vulnerability_scanning/personal/"
},
{
"trust": 0.1,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "https://ca.secunia.com/?page=viewadvisory\u0026vuln_id=44875"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/about_secunia_advisories/"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2011-3474"
},
{
"db": "BID",
"id": "49403"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004092"
},
{
"db": "PACKETSTORM",
"id": "104681"
},
{
"db": "PACKETSTORM",
"id": "104720"
},
{
"db": "CNNVD",
"id": "CNNVD-201108-538"
},
{
"db": "NVD",
"id": "CVE-2011-0342"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "adacdf98-2354-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2011-3474"
},
{
"db": "BID",
"id": "49403"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-004092"
},
{
"db": "PACKETSTORM",
"id": "104681"
},
{
"db": "PACKETSTORM",
"id": "104720"
},
{
"db": "CNNVD",
"id": "CNNVD-201108-538"
},
{
"db": "NVD",
"id": "CVE-2011-0342"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2011-09-02T00:00:00",
"db": "IVD",
"id": "adacdf98-2354-11e6-abef-000c29c66e3d"
},
{
"date": "2011-09-02T00:00:00",
"db": "CNVD",
"id": "CNVD-2011-3474"
},
{
"date": "2011-09-01T00:00:00",
"db": "BID",
"id": "49403"
},
{
"date": "2012-03-27T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2011-004092"
},
{
"date": "2011-09-01T20:47:32",
"db": "PACKETSTORM",
"id": "104681"
},
{
"date": "2011-09-01T09:03:00",
"db": "PACKETSTORM",
"id": "104720"
},
{
"date": "2011-09-02T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201108-538"
},
{
"date": "2011-09-02T16:55:01.460000",
"db": "NVD",
"id": "CVE-2011-0342"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2011-09-02T00:00:00",
"db": "CNVD",
"id": "CNVD-2011-3474"
},
{
"date": "2011-09-30T22:50:00",
"db": "BID",
"id": "49403"
},
{
"date": "2012-03-27T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2011-004092"
},
{
"date": "2011-09-05T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201108-538"
},
{
"date": "2024-11-21T01:23:46.477000",
"db": "NVD",
"id": "CVE-2011-0342"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201108-538"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "InduSoft ISSymbol ActiveX Control Buffer Overflow Vulnerability",
"sources": [
{
"db": "IVD",
"id": "adacdf98-2354-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2011-3474"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Buffer overflow",
"sources": [
{
"db": "IVD",
"id": "adacdf98-2354-11e6-abef-000c29c66e3d"
},
{
"db": "CNNVD",
"id": "CNNVD-201108-538"
}
],
"trust": 0.8
}
}
CVE-2014-0780 (GCVE-0-2014-0780)
Vulnerability from cvelistv5
Published
2014-04-25 01:00
Modified
2025-09-25 17:16
Severity ?
VLAI Severity ?
EPSS score ?
CWE
Summary
Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.exploit-db.com/exploits/42699/ | exploit, x_refsource_EXPLOIT-DB | |
| https://www.cisa.gov/news-events/ics-advisories/icsa-14-107-02 | ||
| http://www.securityfocus.com/bid/67056 | vdb-entry, x_refsource_BID | |
| http://download.indusoft.com/71.2.4/IWS71.2.4.zip |
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| InduSoft | Web Studio |
Version: 7.1 |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T09:27:19.473Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "42699",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/42699/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://ics-cert.us-cert.gov/advisories/ICSA-14-107-02"
},
{
"name": "67056",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/67056"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2014-0780",
"options": [
{
"Exploitation": "active"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-02-07T13:47:17.851913Z",
"version": "2.0.3"
},
"type": "ssvc"
}
},
{
"other": {
"content": {
"dateAdded": "2022-04-15",
"reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0780"
},
"type": "kev"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-07-30T01:46:51.405Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"timeline": [
{
"lang": "en",
"time": "2022-04-15T00:00:00+00:00",
"value": "CVE-2014-0780 added to CISA KEV"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Web Studio",
"vendor": "InduSoft",
"versions": [
{
"status": "affected",
"version": "7.1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Zero Day Initiative (ZDI)"
}
],
"datePublic": "2014-04-24T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eDirectory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests.\u003c/p\u003e"
}
],
"value": "Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests."
}
],
"metrics": [
{
"cvssV2_0": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-09-25T17:16:50.255Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"name": "42699",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/42699/"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-14-107-02"
},
{
"name": "67056",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/67056"
},
{
"url": "http://download.indusoft.com/71.2.4/IWS71.2.4.zip"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eInduSoft did not intend for this web server to be used in real applications. It was provided as demonstration/training software (as stated in user manuals). They have created a mitigation for this vulnerability in InduSoft Web Studio v7.1+Service Pack 2+ Patch 4. Users may obtain this patch at the following location (you must be logged into your InduSoft account):\u0026nbsp;\u003ca target=\"_blank\" rel=\"nofollow\" href=\"http://download.indusoft.com/71.2.4/IWS71.2.4.zip\"\u003ehttp://download.indusoft.com/71.2.4/IWS71.2.4.zip\u003c/a\u003e\u003c/p\u003e\u003cp\u003eInduSoft technical support can be contacted at:\u0026nbsp;\u003ca target=\"_blank\" rel=\"nofollow\"\u003esupport@indusoft.com\u003c/a\u003e\u0026nbsp;.\u003c/p\u003e\n\n\u003cbr\u003e"
}
],
"value": "InduSoft did not intend for this web server to be used in real applications. It was provided as demonstration/training software (as stated in user manuals). They have created a mitigation for this vulnerability in InduSoft Web Studio v7.1+Service Pack 2+ Patch 4. Users may obtain this patch at the following location (you must be logged into your InduSoft account):\u00a0 http://download.indusoft.com/71.2.4/IWS71.2.4.zip \n\nInduSoft technical support can be contacted at:\u00a0support@indusoft.com\u00a0."
}
],
"source": {
"advisory": "ICSA-14-107-02",
"discovery": "EXTERNAL"
},
"title": "InduSoft Web Studio Path Traversal",
"x_generator": {
"engine": "Vulnogram 0.2.0"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "ics-cert@hq.dhs.gov",
"ID": "CVE-2014-0780",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "42699",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/42699/"
},
{
"name": "http://ics-cert.us-cert.gov/advisories/ICSA-14-107-02",
"refsource": "MISC",
"url": "http://ics-cert.us-cert.gov/advisories/ICSA-14-107-02"
},
{
"name": "67056",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/67056"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2014-0780",
"datePublished": "2014-04-25T01:00:00.000Z",
"dateReserved": "2014-01-02T00:00:00.000Z",
"dateUpdated": "2025-09-25T17:16:50.255Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}