ICSA-17-304-02

icsaUScisa_csaf_ot

Trihedral Engineering Limited VTScada

view advisory published 2017-10-31

ATTENTION: Low skill level to exploit.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2017-14031UShigh7.8—
An Improper Access Control issue was discovered in Trihedral VTScada 11.3.03 and prior. A local, non-administrator user has privileges to read and write to the file system of the t…
CVE-2017-14029UShigh7.8—
An Uncontrolled Search Path Element issue was discovered in Trihedral VTScada 11.3.03 and prior. The program will execute specially crafted malicious dll files placed on the target…
02

references

External citations — patches, advisories, analysis.

03

remediations (4)

  • MitigationVTScada

    Trihedral Engineering Limited recommends that users of an affected version update to the latest version, 11.3.05. The update can be found at the following location:

  • MitigationVTScada

    Trihedral Engineering Limited recommends that users of an affected version update to the latest version, 11.3.05. The update can be found at the following location:

  • FixedVTScada

    ftp://ftp.trihedral.com/VTS/VTScada 11.3 Versions/

  • FixedVTScada

    ftp://ftp.trihedral.com/VTS/VTScada 11.3 Versions/

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan