CVE-2017-9967

EUVD-2017-18876
A security misconfiguration vulnerability exists in Schneider Electric's IGSS SCADA Software versions 12 and prior. Security configuration settings such as Address Space Layout Randomization (ASLR) and Data Execution prevention (DEP) were not properly configured resulting in weak security.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 25%
Affected Products (NVD)
VendorProductVersion
schneider-electricinteractive_graphical_scada_system
𝑥
≤ 12.0
𝑥
= Vulnerable software versions
References
http://www.securityfocus.com/bid/103022
https://www.schneider-electric.com/en/download/document/SEVD-2018-037-01/
http://www.securityfocus.com/bid/103022
https://www.schneider-electric.com/en/download/document/SEVD-2018-037-01/