Most recent entries from all

bdu:2018-01124

certfr-2017-avi-274 — De multiples vulnérabilités ont été corrigées dans SCADA Schneider Electric PowerSCADA Expert certfr-2017-avi-274

cnvd-2017-14897

EUVD-2026-75991

fkie_cve-2017-9627

An Uncontrolled Resource Consumption issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The uncontrolled resource consumption vulnerability could allow an attacker to exhaust the memory resources of the machine, causing a denial of service.

GHSA-q2pr-gqr4-26f4

gsd-2017-9627

ICSA-17-187-04 — Schneider Electric Wonderware ArchestrA Logger

The stack-based buffer overflow vulnerability has been identified, which may allow a remote attacker to execute arbitrary code in the context of a highly privileged account.CVE-2017-9629 has been assigned to this vulnerability. Schneider Electric has assigned a CVSS v3 base score of 9.8 to this vulnerability; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The uncontrolled resource consumption vulnerability could allow an attacker to exhaust the memory resources of the machine, causing a denial of service.CVE-2017-9627 has been assigned to this vulnerability. Schneider Electric has assigned a CVSS v3 base score of 8.6 to this vulnerability; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H). The null pointer deference vulnerability could allow an attacker to crash the logger process, causing a denial of service for logging and log-viewing. Schneider Electric notes that applications which use the Wonderware ArchestrA Logger continue to run when the Wonderware ArchestrA Logger service is unavailable.CVE-2017-9631 has been assigned to this vulnerability. Schneider Electric has assigned a CVSS v3 base score of 7.5 to this vulnerability; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).