ICSA-17-241-01

icsaUScisa_csaf_ot

AzeoTech DAQFactory

view advisory published 2017-08-29

ATTENTION: Local access and user-level privileges are required to exploit these vulnerabilities

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2017-5147USmedium5.3—
An Uncontrolled Search Path Element issue was discovered in AzeoTech DAQFactory versions prior to 17.1. An uncontrolled search path element vulnerability has been identified, which…
CVE-2017-12699UShigh7.1OT elevated—
An Incorrect Default Permissions issue was discovered in AzeoTech DAQFactory versions prior to 17.1. Local, non-administrative users may be able to replace or modify original appli…
02

references

External citations — patches, advisories, analysis.

03

remediations (4)

  • MitigationDAQFactory

    According to AzeoTech, the newest version (Version 17.1) gives write privileges only to administrators and no longer searches for dlls outside of the application directory.

  • MitigationDAQFactory

    According to AzeoTech, the newest version (Version 17.1) gives write privileges only to administrators and no longer searches for dlls outside of the application directory.

  • FixedDAQFactory

    The user's license is maintained. Because this is the standard update path for DAQFactory, most users will be familiar with the process.

  • FixedDAQFactory

    The user's license is maintained. Because this is the standard update path for DAQFactory, most users will be familiar with the process.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan