Rockwell Automation SIS Workstation and ISaGRAF Workbench
Successful exploitation of this vulnerability could allow unprivileged local users to overwrite files replacing them with malicious programs.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2015-9268US | high7.8 | — | ||
Nullsoft Scriptable Install System (NSIS) before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-23-318-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-318-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- MitigationISaGRAF Workbench
Rockwell Automation recommends users of the affected software to update the affected product to the latest version:
- MitigationSafety Instrumented System Workstation
Rockwell Automation recommends users of the affected software to update the affected product to the latest version:
- BehobenISaGRAF Workbench
ISaGRAF Workbench: v6.06.10 and later
- BehobenSafety Instrumented System Workstation
Safety Instrumented System Workstation: v2.00 and later
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan