Schneider Electric PowerSCADA Anywhere 1.0 access control

entryeditHistoryDiffjsonxmlCTI

A vulnerability was found in Schneider Electric PowerSCADA Anywhere 1.0 (SCADA Software) and classified as critical. This issue affects some unknown processing. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Field	09/26/2017 03:15 PM	11/19/2019 05:21 PM	01/14/2021 01:44 PM
type	SCADA Software	SCADA Software	SCADA Software
vendor	Schneider Electric	Schneider Electric	Schneider Electric
name	PowerSCADA Anywhere	PowerSCADA Anywhere	PowerSCADA Anywhere
version	1.0	1.0	1.0
cwe	264 (privilege escalation)	264 (privilege escalation)	264 (privilege escalation)
risk	2	2	2
cvss2_vuldb_basescore	5.2	5.2	5.2
cvss2_vuldb_tempscore	5.2	5.2	5.2
cvss2_vuldb_av	A	A	A
cvss2_vuldb_ac	L	L	L
cvss2_vuldb_au	S	S	S
cvss2_vuldb_ci	P	P	P
cvss2_vuldb_ii	P	P	P
cvss2_vuldb_ai	P	P	P
cvss2_nvd_av	A	A	A
cvss2_nvd_ac	L	L	L
cvss2_nvd_au	S	S	S
cvss2_nvd_ci	P	P	P
cvss2_nvd_ii	P	P	P
cvss2_nvd_ai	P	P	P
cvss3_meta_basescore	5.5	5.5	5.5
cvss3_meta_tempscore	5.5	5.5	5.5
cvss3_vuldb_basescore	5.5	5.5	5.5
cvss3_vuldb_tempscore	5.5	5.5	5.5
cvss3_vuldb_av	A	A	A
cvss3_vuldb_ac	L	L	L
cvss3_vuldb_pr	L	L	L
cvss3_vuldb_ui	N	N	N
cvss3_vuldb_s	U	U	U
cvss3_vuldb_c	L	L	L
cvss3_vuldb_i	L	L	L
cvss3_vuldb_a	L	L	L
cvss3_nvd_av	A	A	A
cvss3_nvd_ac	L	L	L
cvss3_nvd_pr	L	L	L
cvss3_nvd_ui	N	N	N
cvss3_nvd_s	U	U	U
cvss3_nvd_c	L	L	L
cvss3_nvd_i	L	L	L
cvss3_nvd_a	L	L	L
date	1506384000 (09/26/2017)	1506384000 (09/26/2017)	1506384000 (09/26/2017)
url	http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/	http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/	http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/
company_name	Schneider Electric	Schneider Electric	Schneider Electric
price_0day	$0-$5k	$0-$5k	$0-$5k
cve	CVE-2017-7972	CVE-2017-7972	CVE-2017-7972
cve_assigned	1492560000	1492560000	1492560000
cve_nvd_published	1506297600	1506297600	1506297600
cve_nvd_summary	A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the ability to escape out of remote PowerSCADA Anywhere applications and launch other processes.	A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the ability to escape out of remote PowerSCADA Anywhere applications and launch other processes.	A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the ability to escape out of remote PowerSCADA Anywhere applications and launch other processes.
securityfocus	99913	99913	99913
securityfocus_date	1500508800 (07/20/2017)	1500508800 (07/20/2017)	1500508800 (07/20/2017)
securityfocus_class	Unknown	Unknown	Unknown
securityfocus_title	Schneider Electric PowerSCADA Anywhere and Citect Anywhere Multiple Security Vulnerabilities	Schneider Electric PowerSCADA Anywhere and Citect Anywhere Multiple Security Vulnerabilities	Schneider Electric PowerSCADA Anywhere and Citect Anywhere Multiple Security Vulnerabilities
seealso	107138 107139 107140 113181	107138 107139 107140 113181	107138 107139 107140 113181
location	Website	Website	Website
cvss2_vuldb_e	ND	ND	ND
cvss2_vuldb_rl	ND	ND	ND
cvss2_vuldb_rc	ND	ND	ND
cvss3_vuldb_e	X	X	X
cvss3_vuldb_rl	X	X	X
cvss3_vuldb_rc	X	X	X
0day_days	67	67	67
cvss3_nvd_basescore	5.5	5.5	5.5
discoverydate		1500508800	1500508800
confirm_url		http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/	http://www.schneider-electric.com/en/download/document/SEVD-2017-173-01/
person_name			Schneider Electric
cvss2_nvd_basescore			5.2

◂ Previous Overview Next ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!