AVEVA Vijeo Citect and Citect SCADA
Advisory ansehen veröffentlicht 2018-11-27
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the target system.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-7799US | high7.8 | — | ||
A DLL hijacking vulnerability exists in Schneider Electric Software Update (SESU), all versions prior to V2.2.0, which could allow an attacker to execute arbitrary code on the targ… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-18-331-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationCitect SCADA
AVEVA recommends following industry cybersecurity best practices
- MitigationVijeo Citect
AVEVA recommends following industry cybersecurity best practices
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan