A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the ability to escape out of remote PowerSCADA Anywhere applications and launch other processes.
Existe una vulnerabilidad en la versión 1.0 de PowerSCADA Anywhere de Schneider Electric redistribuida con PowerSCADA Expert 8.1, PowerSCADA Expert 8.2 y Citect Anywhere 1.0 que permite escaparse de las aplicaciones remotas de PowerSCADA Anywhere y ejecutar otros procesos.
AV:A/AC:L/Au:S/C:P/I:P/A:P
| Access Vector | ADJACENT_NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | SINGLE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | PARTIAL |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
NVD-CWE-noinfo
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| schneider-electric | powerscada_anywhere | 1.0 | <built-in method update of dict object at 0x7e60eb2244c0> | Application |
| schneider-electric | citect_anywhere | 1.0 | <built-in method update of dict object at 0x7e6107f38200> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:schneider-electric:powerscada_anywhere:1.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:a:schneider-electric:powerscada_expert:8.1:*:*:*:*:*:*:* |
| No | cpe:2.3:a:schneider-electric:powerscada_expert:8.2:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:schneider-electric:citect_anywhere:1.0:*:*:*:*:*:*:* |