ICSA-17-241-01

icsaUScisa_csaf_ot

AzeoTech DAQFactory

Advisory ansehen veröffentlicht 2017-08-29

ATTENTION: Local access and user-level privileges are required to exploit these vulnerabilities

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2017-5147USmedium5.3—
An Uncontrolled Search Path Element issue was discovered in AzeoTech DAQFactory versions prior to 17.1. An uncontrolled search path element vulnerability has been identified, which…
CVE-2017-12699UShigh7.1OT erhöht—
An Incorrect Default Permissions issue was discovered in AzeoTech DAQFactory versions prior to 17.1. Local, non-administrative users may be able to replace or modify original appli…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (4)

  • MitigationDAQFactory

    According to AzeoTech, the newest version (Version 17.1) gives write privileges only to administrators and no longer searches for dlls outside of the application directory.

  • MitigationDAQFactory

    According to AzeoTech, the newest version (Version 17.1) gives write privileges only to administrators and no longer searches for dlls outside of the application directory.

  • BehobenDAQFactory

    The user's license is maintained. Because this is the standard update path for DAQFactory, most users will be familiar with the process.

  • BehobenDAQFactory

    The user's license is maintained. Because this is the standard update path for DAQFactory, most users will be familiar with the process.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan