var-201209-0244
Vulnerability from variot
Multiple untrusted search path vulnerabilities in RealFlex RealWin before 2.1.13, FlexView before 3.1.86, and RealWinDemo before 2.1.13 allow local users to gain privileges via a Trojan horse (1) realwin.dll or (2) keyhook.dll file in the current working directory. plural RealFlex There is a vulnerability in the product that can be obtained because the processing related to the search path is incomplete. Supplementary information : CWE Vulnerability type by CWE-426: Untrusted Search Path ( Unreliable search path ) Has been identified. (1) realwin.dll Or (2) keyhook.dll It may be possible to get permission through the file. RealWin is a data acquisition and monitoring control system (SCADA) server product running on the Windows platform. FlexView is a human interface product for Eston Automation. Multiple RealFlex products are not installed in the library file, and an attacker can build a malicious DLL file, store it in a remote WebDAV or SMB share, entice the application to parse, and execute arbitrary code in the application context. Multiple RealFlex products are prone to an insecure library loading vulnerability
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201209-0244",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "realwin",
"scope": "eq",
"trust": 1.6,
"vendor": "realflex",
"version": "1.06"
},
{
"model": "realwin",
"scope": "eq",
"trust": 1.6,
"vendor": "realflex",
"version": "2.1"
},
{
"model": "realwin",
"scope": "eq",
"trust": 1.6,
"vendor": "realflex",
"version": "2.0"
},
{
"model": "realwin",
"scope": "lte",
"trust": 1.0,
"vendor": "realflex",
"version": "2.1.12"
},
{
"model": "flexview",
"scope": "lte",
"trust": 1.0,
"vendor": "realflex",
"version": "3.1.85"
},
{
"model": "realwindemo",
"scope": "lte",
"trust": 1.0,
"vendor": "realflex",
"version": "2.1.12"
},
{
"model": "flexview",
"scope": "lt",
"trust": 0.8,
"vendor": "realflex",
"version": "3.1.86"
},
{
"model": "realwin",
"scope": "lt",
"trust": 0.8,
"vendor": "realflex",
"version": "2.1.13"
},
{
"model": "realwindemo",
"scope": "lt",
"trust": 0.8,
"vendor": "realflex",
"version": "2.1.13"
},
{
"model": "realwindemo",
"scope": "lte",
"trust": 0.6,
"vendor": "realflex",
"version": "\u003c=2.1.12"
},
{
"model": "realwin",
"scope": "lte",
"trust": 0.6,
"vendor": "realflex",
"version": "\u003c=2.1.12"
},
{
"model": "flexview",
"scope": "lte",
"trust": 0.6,
"vendor": "realflex",
"version": "\u003c=3.1.85"
},
{
"model": "realwindemo",
"scope": "eq",
"trust": 0.6,
"vendor": "realflex",
"version": "2.1.12"
},
{
"model": "realwin",
"scope": "eq",
"trust": 0.6,
"vendor": "realflex",
"version": "2.1.12"
},
{
"model": "flexview",
"scope": "eq",
"trust": 0.6,
"vendor": "realflex",
"version": "3.1.85"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "realwin",
"version": "1.06"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "realwin",
"version": "2.0"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "realwin",
"version": "2.1"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "realwin",
"version": "*"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "flexview",
"version": "*"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "realwindemo",
"version": "*"
}
],
"sources": [
{
"db": "IVD",
"id": "63c9cf40-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2012-5010"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-004246"
},
{
"db": "CNNVD",
"id": "CNNVD-201209-148"
},
{
"db": "NVD",
"id": "CVE-2012-3004"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:realflex:flexview",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:realflex:realwin",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:realflex:realwindemo",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2012-004246"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Carlos Mario Penagos Hollmann",
"sources": [
{
"db": "BID",
"id": "55464"
}
],
"trust": 0.3
},
"cve": "CVE-2012-3004",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.4,
"id": "CVE-2012-3004",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.4,
"id": "63c9cf40-2353-11e6-abef-000c29c66e3d",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.9 [IVD]"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2012-3004",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2012-3004",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNNVD",
"id": "CNNVD-201209-148",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "IVD",
"id": "63c9cf40-2353-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "63c9cf40-2353-11e6-abef-000c29c66e3d"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-004246"
},
{
"db": "CNNVD",
"id": "CNNVD-201209-148"
},
{
"db": "NVD",
"id": "CVE-2012-3004"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Multiple untrusted search path vulnerabilities in RealFlex RealWin before 2.1.13, FlexView before 3.1.86, and RealWinDemo before 2.1.13 allow local users to gain privileges via a Trojan horse (1) realwin.dll or (2) keyhook.dll file in the current working directory. plural RealFlex There is a vulnerability in the product that can be obtained because the processing related to the search path is incomplete. Supplementary information : CWE Vulnerability type by CWE-426: Untrusted Search Path ( Unreliable search path ) Has been identified. (1) realwin.dll Or (2) keyhook.dll It may be possible to get permission through the file. RealWin is a data acquisition and monitoring control system (SCADA) server product running on the Windows platform. FlexView is a human interface product for Eston Automation. Multiple RealFlex products are not installed in the library file, and an attacker can build a malicious DLL file, store it in a remote WebDAV or SMB share, entice the application to parse, and execute arbitrary code in the application context. Multiple RealFlex products are prone to an insecure library loading vulnerability",
"sources": [
{
"db": "NVD",
"id": "CVE-2012-3004"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-004246"
},
{
"db": "CNVD",
"id": "CNVD-2012-5010"
},
{
"db": "BID",
"id": "55464"
},
{
"db": "IVD",
"id": "63c9cf40-2353-11e6-abef-000c29c66e3d"
}
],
"trust": 2.61
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2012-3004",
"trust": 3.5
},
{
"db": "ICS CERT",
"id": "ICSA-12-251-01",
"trust": 3.3
},
{
"db": "CNVD",
"id": "CNVD-2012-5010",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201209-148",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2012-004246",
"trust": 0.8
},
{
"db": "BID",
"id": "55464",
"trust": 0.3
},
{
"db": "IVD",
"id": "63C9CF40-2353-11E6-ABEF-000C29C66E3D",
"trust": 0.2
}
],
"sources": [
{
"db": "IVD",
"id": "63c9cf40-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2012-5010"
},
{
"db": "BID",
"id": "55464"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-004246"
},
{
"db": "CNNVD",
"id": "CNNVD-201209-148"
},
{
"db": "NVD",
"id": "CVE-2012-3004"
}
]
},
"id": "VAR-201209-0244",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "63c9cf40-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2012-5010"
}
],
"trust": 1.2319444400000001
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "63c9cf40-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2012-5010"
}
]
},
"last_update_date": "2024-11-23T22:59:49.190000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "http://www.realflex.com/"
},
{
"title": "Multiple RealFlex product insecure libraries load patches for arbitrary code execution vulnerabilities",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/21891"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2012-5010"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-004246"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
},
{
"problemtype": "CWE-Other",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2012-004246"
},
{
"db": "NVD",
"id": "CVE-2012-3004"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.3,
"url": "http://www.us-cert.gov/control_systems/pdf/icsa-12-251-01.pdf"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-3004"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-3004"
},
{
"trust": 0.3,
"url": "http://realflex.com/products/"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2012-5010"
},
{
"db": "BID",
"id": "55464"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-004246"
},
{
"db": "CNNVD",
"id": "CNNVD-201209-148"
},
{
"db": "NVD",
"id": "CVE-2012-3004"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "63c9cf40-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2012-5010"
},
{
"db": "BID",
"id": "55464"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-004246"
},
{
"db": "CNNVD",
"id": "CNNVD-201209-148"
},
{
"db": "NVD",
"id": "CVE-2012-3004"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2012-09-11T00:00:00",
"db": "IVD",
"id": "63c9cf40-2353-11e6-abef-000c29c66e3d"
},
{
"date": "2012-09-11T00:00:00",
"db": "CNVD",
"id": "CNVD-2012-5010"
},
{
"date": "2012-09-07T00:00:00",
"db": "BID",
"id": "55464"
},
{
"date": "2012-09-12T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2012-004246"
},
{
"date": "2012-09-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201209-148"
},
{
"date": "2012-09-08T10:28:20.510000",
"db": "NVD",
"id": "CVE-2012-3004"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2012-09-11T00:00:00",
"db": "CNVD",
"id": "CNVD-2012-5010"
},
{
"date": "2012-09-07T00:00:00",
"db": "BID",
"id": "55464"
},
{
"date": "2012-09-12T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2012-004246"
},
{
"date": "2012-09-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201209-148"
},
{
"date": "2024-11-21T01:40:06.297000",
"db": "NVD",
"id": "CVE-2012-3004"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "BID",
"id": "55464"
},
{
"db": "CNNVD",
"id": "CNNVD-201209-148"
}
],
"trust": 0.9
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural RealFlex Vulnerability gained in products",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2012-004246"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "IVD",
"id": "63c9cf40-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNNVD",
"id": "CNNVD-201209-148"
}
],
"trust": 0.8
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…