var-201708-1398
Vulnerability from variot
A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu, SiteScan Web 5.2 and prior. An authenticated attacker may be able to overwrite files that are used to execute code. This vulnerability does not affect version 6.5 of the software. ALC WebCTRL , i-Vu ,and SiteScan Web Contains a path traversal vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. ALC WebCTRL is a building automation platform. Multiple Automated Logic Corporation Products are prone to a directory-traversal vulnerability and an arbitrary-file-upload vulnerability. An attacker can exploit these issues to obtain sensitive information, to upload arbitrary code, and run it in the context of the webserver process. WebCTRL®, Automated Logic's web-based building automationsystem, is known for its intuitive user interface and powerful integrationcapabilities. It allows building operators to optimize and manageall of their building systems - including HVAC, lighting, fire, elevators,and security - all within a single HVAC controls platform. It's everythingthey need to keep occupants comfortable, manage energy conservation measures,identify key operational problems, and validate the results.WebCTRL suffers from an authenticated arbitrary code execution vulnerability. The issue is caused due to the improper verification when uploading Add-on (.addons or .war) files using the uploadwarfile servlet. This can be exploited to execute arbitrary code by uploading a malicious web archive file that will run automatically and can be accessed from within the webroot directory. Additionaly, an improper authorization access control occurs when using the 'anonymous' user. By specification, the anonymous user should not have permissions or authorization to upload or install add-ons. The anonymous user was removed from version 6.5 of WebCTRL.Tested on: Microsoft Windows 7 Professional (6.1.7601 Service Pack 1 Build 7601)Apache-Coyote/1.1Apache Tomcat/7.0.42CJServer/1.1Java/1.7.0_25-b17Java HotSpot Server VM 23.25-b01Ant 1.7.0Axis 1.4Trove 2.0.2Xalan Java 2.4.1Xerces-J 2.6.1. The vulnerability exist due to the improper permissions,with the 'M' flag (Modify) or 'C' flag (Change) for 'Authenticated Users' group.The application suffers from an unquoted search path issue as well impacting the service'WebCTRL Service' for Windows deployed as part of WebCTRL server solution. This couldpotentially allow an authorized but non-privileged local user to execute arbitrarycode with elevated privileges on the system. A successful attempt would require thelocal user to be able to insert their code in the system root path undetected by theOS or other security applications where it could potentially be executed duringapplication startup or reboot. If successful, the local user’s code would executewith the elevated privileges of the application.Tested on: Microsoft Windows 7 Professional SP1 (EN).
Desc: The vulnerability is triggered by an authenticated user that can use the manualcommand console in the management panel of the affected application. The ManualCommand() function in ManualCommand.js allows users to perform additional diagnostics and settings overview by using pre-defined set of commands. This can be exploited by using the echo command to write and/or overwrite arbitrary files on the system including directory traversal throughout the system
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201708-1398",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "i-vu",
"scope": "lte",
"trust": 1.0,
"vendor": "automatedlogic",
"version": "5.5"
},
{
"model": "sitescan web",
"scope": "lte",
"trust": 1.0,
"vendor": "automatedlogic",
"version": "6.1"
},
{
"model": "automatedlogic webctrl",
"scope": "lte",
"trust": 1.0,
"vendor": "carrier",
"version": "5.2"
},
{
"model": "automatedlogic webctrl",
"scope": "lte",
"trust": 1.0,
"vendor": "carrier",
"version": "6.0"
},
{
"model": "automatedlogic webctrl",
"scope": "lte",
"trust": 1.0,
"vendor": "carrier",
"version": "5.5"
},
{
"model": "sitescan web",
"scope": "lte",
"trust": 1.0,
"vendor": "automatedlogic",
"version": "5.2"
},
{
"model": "automatedlogic webctrl",
"scope": "lte",
"trust": 1.0,
"vendor": "carrier",
"version": "6.1"
},
{
"model": "i-vu",
"scope": "lte",
"trust": 1.0,
"vendor": "automatedlogic",
"version": "5.2"
},
{
"model": "sitescan web",
"scope": "lte",
"trust": 1.0,
"vendor": "automatedlogic",
"version": "5.5"
},
{
"model": "i-vu",
"scope": "lte",
"trust": 1.0,
"vendor": "automatedlogic",
"version": "6.0"
},
{
"model": null,
"scope": "eq",
"trust": 0.8,
"vendor": "webctrl",
"version": "*"
},
{
"model": "i-vu",
"scope": "lte",
"trust": 0.8,
"vendor": "automated logic",
"version": "5.2"
},
{
"model": "i-vu",
"scope": "lte",
"trust": 0.8,
"vendor": "automated logic",
"version": "5.5"
},
{
"model": "i-vu",
"scope": "lte",
"trust": 0.8,
"vendor": "automated logic",
"version": "6.0"
},
{
"model": "i-vu",
"scope": "lte",
"trust": 0.8,
"vendor": "automated logic",
"version": "6.5"
},
{
"model": "sitescan web",
"scope": "lte",
"trust": 0.8,
"vendor": "automated logic",
"version": "5.2"
},
{
"model": "sitescan web",
"scope": "lte",
"trust": 0.8,
"vendor": "automated logic",
"version": "5.5"
},
{
"model": "sitescan web",
"scope": "lte",
"trust": 0.8,
"vendor": "automated logic",
"version": "6.1"
},
{
"model": "sitescan web",
"scope": "lte",
"trust": 0.8,
"vendor": "automated logic",
"version": "6.5"
},
{
"model": "webctrl",
"scope": "lte",
"trust": 0.8,
"vendor": "automated logic",
"version": "5.2"
},
{
"model": "webctrl",
"scope": "lte",
"trust": 0.8,
"vendor": "automated logic",
"version": "5.5"
},
{
"model": "webctrl",
"scope": "lte",
"trust": 0.8,
"vendor": "automated logic",
"version": "6.0"
},
{
"model": "webctrl",
"scope": "lte",
"trust": 0.8,
"vendor": "automated logic",
"version": "6.1"
},
{
"model": "webctrl",
"scope": "lte",
"trust": 0.8,
"vendor": "automated logic",
"version": "6.5"
},
{
"model": null,
"scope": "eq",
"trust": 0.6,
"vendor": "i vu",
"version": "*"
},
{
"model": null,
"scope": "eq",
"trust": 0.6,
"vendor": "sitescan web",
"version": "*"
},
{
"model": "sitescan web",
"scope": "lte",
"trust": 0.6,
"vendor": "ibm automated logic",
"version": "\u003c=6.5"
},
{
"model": "alc webctrl i-vu",
"scope": "lte",
"trust": 0.6,
"vendor": "automated logic",
"version": "\u003c=6.0"
},
{
"model": "alc webctrl sitescan web",
"scope": "lte",
"trust": 0.6,
"vendor": "automated logic",
"version": "\u003c=6.1"
},
{
"model": "sitescan web i-vu alc webctrl",
"scope": "lte",
"trust": 0.6,
"vendor": "automated logic",
"version": "\u003c=6.5"
},
{
"model": "sitescan web i-vu alc webctrl",
"scope": "lte",
"trust": 0.6,
"vendor": "automated logic",
"version": "\u003c=5.5"
},
{
"model": "sitescan web i-vu alc webctrl",
"scope": "lte",
"trust": 0.6,
"vendor": "automated logic",
"version": "\u003c=5.2"
},
{
"model": "i-vu",
"scope": "eq",
"trust": 0.6,
"vendor": "automatedlogic",
"version": "6.0"
},
{
"model": "sitescan web",
"scope": "eq",
"trust": 0.6,
"vendor": "automatedlogic",
"version": "5.5"
},
{
"model": "sitescan web",
"scope": "eq",
"trust": 0.6,
"vendor": "automatedlogic",
"version": "5.2"
},
{
"model": "webctrl",
"scope": "eq",
"trust": 0.6,
"vendor": "automatedlogic",
"version": "6.1"
},
{
"model": "webctrl",
"scope": "eq",
"trust": 0.6,
"vendor": "automatedlogic",
"version": "5.5"
},
{
"model": "webctrl",
"scope": "eq",
"trust": 0.6,
"vendor": "automatedlogic",
"version": "5.2"
},
{
"model": "sitescan web",
"scope": "eq",
"trust": 0.6,
"vendor": "automatedlogic",
"version": "6.1"
},
{
"model": "i-vu",
"scope": "eq",
"trust": 0.6,
"vendor": "automatedlogic",
"version": "5.2"
},
{
"model": "i-vu",
"scope": "eq",
"trust": 0.6,
"vendor": "automatedlogic",
"version": "5.5"
},
{
"model": "webctrl",
"scope": "eq",
"trust": 0.6,
"vendor": "automatedlogic",
"version": "6.0"
},
{
"model": "webctrl",
"scope": "lte",
"trust": 0.3,
"vendor": "automated logic",
"version": " sitescan web 6.1 and prior"
},
{
"model": "webctrl",
"scope": "lte",
"trust": 0.3,
"vendor": "automated logic",
"version": " i-vu 6.0 and prior"
},
{
"model": "webctrl",
"scope": "lte",
"trust": 0.3,
"vendor": "automated logic",
"version": " sitescan web 5.5 and prior"
},
{
"model": "webctrl",
"scope": "lte",
"trust": 0.3,
"vendor": "automated logic",
"version": " sitescan web 5.2 and prior"
},
{
"model": "webctrl",
"scope": "eq",
"trust": 0.3,
"vendor": "automated logic",
"version": "6.1 and 6.0"
},
{
"model": "webctrl",
"scope": "eq",
"trust": 0.3,
"vendor": "automated logic",
"version": "6.5"
},
{
"model": "webctrl",
"scope": "eq",
"trust": 0.3,
"vendor": "automated logic",
"version": "6.1"
},
{
"model": "webctrl",
"scope": "eq",
"trust": 0.3,
"vendor": "automated logic",
"version": "6.0"
},
{
"model": "webctrl",
"scope": "eq",
"trust": 0.3,
"vendor": "automated logic",
"version": "5.5"
},
{
"model": "webctrl",
"scope": "eq",
"trust": 0.3,
"vendor": "automated logic",
"version": "5.2"
},
{
"model": "sitescan web",
"scope": "eq",
"trust": 0.3,
"vendor": "automated logic",
"version": "6.5"
},
{
"model": "sitescan web",
"scope": "eq",
"trust": 0.3,
"vendor": "automated logic",
"version": "6.1"
},
{
"model": "sitescan web",
"scope": "eq",
"trust": 0.3,
"vendor": "automated logic",
"version": "5.5"
},
{
"model": "sitescan web",
"scope": "eq",
"trust": 0.3,
"vendor": "automated logic",
"version": "5.2"
},
{
"model": "i-vu",
"scope": "eq",
"trust": 0.3,
"vendor": "automated logic",
"version": "6.5"
},
{
"model": "i-vu",
"scope": "eq",
"trust": 0.3,
"vendor": "automated logic",
"version": "6.0"
},
{
"model": "i-vu",
"scope": "eq",
"trust": 0.3,
"vendor": "automated logic",
"version": "5.5"
},
{
"model": "i-vu",
"scope": "eq",
"trust": 0.3,
"vendor": "automated logic",
"version": "5.2"
},
{
"model": "webctrl",
"scope": "lte",
"trust": 0.2,
"vendor": "automated logic",
"version": " sitescan web 6.5 and prior"
}
],
"sources": [
{
"db": "ZSL",
"id": "ZSL-2017-5431"
},
{
"db": "ZSL",
"id": "ZSL-2017-5430"
},
{
"db": "ZSL",
"id": "ZSL-2017-5429"
},
{
"db": "IVD",
"id": "f06fbadd-bae1-46a3-8a6f-c5a536b9697e"
},
{
"db": "CNVD",
"id": "CNVD-2017-22829"
},
{
"db": "BID",
"id": "100452"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007643"
},
{
"db": "CNNVD",
"id": "CNNVD-201706-863"
},
{
"db": "NVD",
"id": "CVE-2017-9640"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:automatedlogic:i-vu",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:automatedlogic:sitescan_web",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:automatedlogic:webctrl",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-007643"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Vulnerability discovered by Gjoko Krstic",
"sources": [
{
"db": "ZSL",
"id": "ZSL-2017-5431"
},
{
"db": "ZSL",
"id": "ZSL-2017-5430"
},
{
"db": "ZSL",
"id": "ZSL-2017-5429"
}
],
"trust": 0.3
},
"cve": "CVE-2017-9640",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 6.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.0,
"id": "CVE-2017-9640",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2017-22829",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "f06fbadd-bae1-46a3-8a6f-c5a536b9697e",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.9 [IVD]"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "LOW",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"exploitabilityScore": 2.8,
"id": "CVE-2017-9640",
"impactScore": 3.4,
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2017-9640",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2017-9640",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2017-22829",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201706-863",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "IVD",
"id": "f06fbadd-bae1-46a3-8a6f-c5a536b9697e",
"trust": 0.2,
"value": "MEDIUM"
},
{
"author": "ZSL",
"id": "ZSL-2017-5431",
"trust": 0.1,
"value": "(4/5)"
},
{
"author": "ZSL",
"id": "ZSL-2017-5430",
"trust": 0.1,
"value": "(3/5)"
},
{
"author": "ZSL",
"id": "ZSL-2017-5429",
"trust": 0.1,
"value": "(3/5)"
}
]
}
],
"sources": [
{
"db": "ZSL",
"id": "ZSL-2017-5431"
},
{
"db": "ZSL",
"id": "ZSL-2017-5430"
},
{
"db": "ZSL",
"id": "ZSL-2017-5429"
},
{
"db": "IVD",
"id": "f06fbadd-bae1-46a3-8a6f-c5a536b9697e"
},
{
"db": "CNVD",
"id": "CNVD-2017-22829"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007643"
},
{
"db": "CNNVD",
"id": "CNNVD-201706-863"
},
{
"db": "NVD",
"id": "CVE-2017-9640"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu, SiteScan Web 5.2 and prior. An authenticated attacker may be able to overwrite files that are used to execute code. This vulnerability does not affect version 6.5 of the software. ALC WebCTRL , i-Vu ,and SiteScan Web Contains a path traversal vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. ALC WebCTRL is a building automation platform. Multiple Automated Logic Corporation Products are prone to a directory-traversal vulnerability and an arbitrary-file-upload vulnerability. \nAn attacker can exploit these issues to obtain sensitive information, to upload arbitrary code, and run it in the context of the webserver process. WebCTRL\u00ae, Automated Logic\u0027s web-based building automationsystem, is known for its intuitive user interface and powerful integrationcapabilities. It allows building operators to optimize and manageall of their building systems - including HVAC, lighting, fire, elevators,and security - all within a single HVAC controls platform. It\u0027s everythingthey need to keep occupants comfortable, manage energy conservation measures,identify key operational problems, and validate the results.WebCTRL suffers from an authenticated arbitrary code execution vulnerability. The issue is caused due to the improper verification when uploading Add-on (.addons or .war) files using the uploadwarfile servlet. This can be exploited to execute arbitrary code by uploading a malicious web archive file that will run automatically and can be accessed from within the webroot directory. Additionaly, an improper authorization access control occurs when using the \u0027anonymous\u0027 user. By specification, the anonymous user should not have permissions or authorization to upload or install add-ons. The anonymous user was removed from version 6.5 of WebCTRL.Tested on: Microsoft Windows 7 Professional (6.1.7601 Service Pack 1 Build 7601)Apache-Coyote/1.1Apache Tomcat/7.0.42CJServer/1.1Java/1.7.0_25-b17Java HotSpot Server VM 23.25-b01Ant 1.7.0Axis 1.4Trove 2.0.2Xalan Java 2.4.1Xerces-J 2.6.1. The vulnerability exist due to the improper permissions,with the \u0027M\u0027 flag (Modify) or \u0027C\u0027 flag (Change) for \u0027Authenticated Users\u0027 group.The application suffers from an unquoted search path issue as well impacting the service\u0027WebCTRL Service\u0027 for Windows deployed as part of WebCTRL server solution. This couldpotentially allow an authorized but non-privileged local user to execute arbitrarycode with elevated privileges on the system. A successful attempt would require thelocal user to be able to insert their code in the system root path undetected by theOS or other security applications where it could potentially be executed duringapplication startup or reboot. If successful, the local user\u2019s code would executewith the elevated privileges of the application.Tested on: Microsoft Windows 7 Professional SP1 (EN). \n\nDesc: The vulnerability is triggered by an authenticated user that can use\nthe manualcommand console in the management panel of the affected application. \nThe ManualCommand() function in ManualCommand.js allows users to perform additional\ndiagnostics and settings overview by using pre-defined set of commands. This\ncan be exploited by using the echo command to write and/or overwrite arbitrary\nfiles on the system including directory traversal throughout the system",
"sources": [
{
"db": "NVD",
"id": "CVE-2017-9640"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007643"
},
{
"db": "CNVD",
"id": "CNVD-2017-22829"
},
{
"db": "BID",
"id": "100452"
},
{
"db": "IVD",
"id": "f06fbadd-bae1-46a3-8a6f-c5a536b9697e"
},
{
"db": "ZSL",
"id": "ZSL-2017-5431"
},
{
"db": "ZSL",
"id": "ZSL-2017-5430"
},
{
"db": "ZSL",
"id": "ZSL-2017-5429"
},
{
"db": "PACKETSTORM",
"id": "143896"
}
],
"trust": 2.97
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "http://www.automatedlogic.com/pages/security.aspx",
"trust": 0.3,
"type": "poc"
}
],
"sources": [
{
"db": "ZSL",
"id": "ZSL-2017-5431"
},
{
"db": "ZSL",
"id": "ZSL-2017-5430"
},
{
"db": "ZSL",
"id": "ZSL-2017-5429"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2017-9640",
"trust": 3.7
},
{
"db": "ICS CERT",
"id": "ICSA-17-234-01",
"trust": 3.0
},
{
"db": "BID",
"id": "100452",
"trust": 2.1
},
{
"db": "EXPLOIT-DB",
"id": "42543",
"trust": 1.7
},
{
"db": "CNVD",
"id": "CNVD-2017-22829",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201706-863",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007643",
"trust": 0.8
},
{
"db": "PACKETSTORM",
"id": "143896",
"trust": 0.2
},
{
"db": "ZSL",
"id": "ZSL-2017-5430",
"trust": 0.2
},
{
"db": "IVD",
"id": "F06FBADD-BAE1-46A3-8A6F-C5A536B9697E",
"trust": 0.2
},
{
"db": "PACKETSTORM",
"id": "143897",
"trust": 0.1
},
{
"db": "EXPLOIT-DB",
"id": "42544",
"trust": 0.1
},
{
"db": "NVD",
"id": "CVE-2017-9650",
"trust": 0.1
},
{
"db": "CXSECURITY",
"id": "WLB-2017080166",
"trust": 0.1
},
{
"db": "ZSL",
"id": "ZSL-2017-5431",
"trust": 0.1
},
{
"db": "AUSCERT",
"id": "ESB-2017.2113",
"trust": 0.1
},
{
"db": "CXSECURITY",
"id": "WLB-2017080165",
"trust": 0.1
},
{
"db": "CXSECURITY",
"id": "WLB-2017080167",
"trust": 0.1
},
{
"db": "NVD",
"id": "CVE-2017-9644",
"trust": 0.1
},
{
"db": "BID",
"id": "100454",
"trust": 0.1
},
{
"db": "EXPLOIT-DB",
"id": "42542",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "143895",
"trust": 0.1
},
{
"db": "ZSL",
"id": "ZSL-2017-5429",
"trust": 0.1
}
],
"sources": [
{
"db": "ZSL",
"id": "ZSL-2017-5431"
},
{
"db": "ZSL",
"id": "ZSL-2017-5430"
},
{
"db": "ZSL",
"id": "ZSL-2017-5429"
},
{
"db": "IVD",
"id": "f06fbadd-bae1-46a3-8a6f-c5a536b9697e"
},
{
"db": "CNVD",
"id": "CNVD-2017-22829"
},
{
"db": "BID",
"id": "100452"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007643"
},
{
"db": "PACKETSTORM",
"id": "143896"
},
{
"db": "CNNVD",
"id": "CNNVD-201706-863"
},
{
"db": "NVD",
"id": "CVE-2017-9640"
}
]
},
"id": "VAR-201708-1398",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "f06fbadd-bae1-46a3-8a6f-c5a536b9697e"
},
{
"db": "CNVD",
"id": "CNVD-2017-22829"
}
],
"trust": 0.08
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "f06fbadd-bae1-46a3-8a6f-c5a536b9697e"
},
{
"db": "CNVD",
"id": "CNVD-2017-22829"
}
]
},
"last_update_date": "2024-11-23T22:00:54.843000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Security Best Practices Checklists for Building Automation Systems (BAS)",
"trust": 0.8,
"url": "http://www.automatedlogic.com/Pages/Security.aspx"
},
{
"title": "ALC WebCTRL i-Vu/SiteScan Web Path Traversal Vulnerability Patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/100836"
},
{
"title": "ALC WebCTRL , i-Vu and SiteScan Web Repair measures for path traversal vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=99872"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-22829"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007643"
},
{
"db": "CNNVD",
"id": "CNNVD-201706-863"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-22",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-007643"
},
{
"db": "NVD",
"id": "CVE-2017-9640"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.0,
"url": "https://ics-cert.us-cert.gov/advisories/icsa-17-234-01"
},
{
"trust": 1.8,
"url": "http://www.securityfocus.com/bid/100452"
},
{
"trust": 1.7,
"url": "https://www.exploit-db.com/exploits/42543/"
},
{
"trust": 1.0,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-9640"
},
{
"trust": 1.0,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-9640"
},
{
"trust": 0.6,
"url": "http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-9640"
},
{
"trust": 0.4,
"url": "http://www.automatedlogic.com"
},
{
"trust": 0.3,
"url": "http://www.automatedlogic.com/pages/security_commitment.aspx"
},
{
"trust": 0.3,
"url": "http://www.automatedlogic.com/specsheets/security_best_practices_checklists_for_building_automation_systems_(bas)pdf.pdf"
},
{
"trust": 0.3,
"url": "http://www.securityweek.com/automated-logic-patches-flaws-building-automation-system"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-9650"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-9650"
},
{
"trust": 0.1,
"url": "https://www.exploit-db.com/exploits/42544/"
},
{
"trust": 0.1,
"url": "https://packetstormsecurity.com/files/143897"
},
{
"trust": 0.1,
"url": "https://cxsecurity.com/issue/wlb-2017080166"
},
{
"trust": 0.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130767"
},
{
"trust": 0.1,
"url": "http://www.vfocus.net/art/20170824/13802.html"
},
{
"trust": 0.1,
"url": "https://cxsecurity.com/issue/wlb-2017080165"
},
{
"trust": 0.1,
"url": "https://packetstormsecurity.com/files/143896"
},
{
"trust": 0.1,
"url": "https://www.auscert.org.au/bulletins/51482"
},
{
"trust": 0.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130766"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-9644"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-9644"
},
{
"trust": 0.1,
"url": "https://packetstormsecurity.com/files/143895"
},
{
"trust": 0.1,
"url": "https://cxsecurity.com/issue/wlb-2017080167"
},
{
"trust": 0.1,
"url": "https://www.exploit-db.com/exploits/42542/"
},
{
"trust": 0.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130760"
},
{
"trust": 0.1,
"url": "http://www.securityfocus.com/bid/100454"
},
{
"trust": 0.1,
"url": "http://target/touch.txt"
},
{
"trust": 0.1,
"url": "https://www.zeroscience.mk/en/vulnerabilities/zsl-2017-5430.php"
}
],
"sources": [
{
"db": "ZSL",
"id": "ZSL-2017-5431"
},
{
"db": "ZSL",
"id": "ZSL-2017-5430"
},
{
"db": "ZSL",
"id": "ZSL-2017-5429"
},
{
"db": "CNVD",
"id": "CNVD-2017-22829"
},
{
"db": "BID",
"id": "100452"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007643"
},
{
"db": "PACKETSTORM",
"id": "143896"
},
{
"db": "CNNVD",
"id": "CNNVD-201706-863"
},
{
"db": "NVD",
"id": "CVE-2017-9640"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "ZSL",
"id": "ZSL-2017-5431"
},
{
"db": "ZSL",
"id": "ZSL-2017-5430"
},
{
"db": "ZSL",
"id": "ZSL-2017-5429"
},
{
"db": "IVD",
"id": "f06fbadd-bae1-46a3-8a6f-c5a536b9697e"
},
{
"db": "CNVD",
"id": "CNVD-2017-22829"
},
{
"db": "BID",
"id": "100452"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007643"
},
{
"db": "PACKETSTORM",
"id": "143896"
},
{
"db": "CNNVD",
"id": "CNNVD-201706-863"
},
{
"db": "NVD",
"id": "CVE-2017-9640"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-08-22T00:00:00",
"db": "ZSL",
"id": "ZSL-2017-5431"
},
{
"date": "2017-08-22T00:00:00",
"db": "ZSL",
"id": "ZSL-2017-5430"
},
{
"date": "2017-08-22T00:00:00",
"db": "ZSL",
"id": "ZSL-2017-5429"
},
{
"date": "2017-08-25T00:00:00",
"db": "IVD",
"id": "f06fbadd-bae1-46a3-8a6f-c5a536b9697e"
},
{
"date": "2017-08-25T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-22829"
},
{
"date": "2017-08-22T00:00:00",
"db": "BID",
"id": "100452"
},
{
"date": "2017-09-27T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-007643"
},
{
"date": "2017-08-23T07:06:24",
"db": "PACKETSTORM",
"id": "143896"
},
{
"date": "2017-06-21T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201706-863"
},
{
"date": "2017-08-25T19:29:00.410000",
"db": "NVD",
"id": "CVE-2017-9640"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-08-28T00:00:00",
"db": "ZSL",
"id": "ZSL-2017-5431"
},
{
"date": "2017-08-25T00:00:00",
"db": "ZSL",
"id": "ZSL-2017-5430"
},
{
"date": "2017-08-25T00:00:00",
"db": "ZSL",
"id": "ZSL-2017-5429"
},
{
"date": "2017-08-25T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-22829"
},
{
"date": "2017-08-22T00:00:00",
"db": "BID",
"id": "100452"
},
{
"date": "2017-09-27T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-007643"
},
{
"date": "2019-10-17T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201706-863"
},
{
"date": "2024-11-21T03:36:34.267000",
"db": "NVD",
"id": "CVE-2017-9640"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201706-863"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "ALC WebCTRL i-Vu/SiteScan Web Path traversal vulnerability",
"sources": [
{
"db": "IVD",
"id": "f06fbadd-bae1-46a3-8a6f-c5a536b9697e"
},
{
"db": "CNVD",
"id": "CNVD-2017-22829"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Path traversal",
"sources": [
{
"db": "IVD",
"id": "f06fbadd-bae1-46a3-8a6f-c5a536b9697e"
},
{
"db": "CNNVD",
"id": "CNNVD-201706-863"
}
],
"trust": 0.8
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…