Most recent entries from all

bdu:2017-02105

certfr-2017-avi-274 — De multiples vulnérabilités ont été corrigées dans SCADA Schneider Electric PowerSCADA Expert certfr-2017-avi-274

cnvd-2017-14898

EUVD-2026-75948

fkie_cve-2017-9629

A Stack-Based Buffer Overflow issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The stack-based buffer overflow vulnerability has been identified, which may allow a remote attacker to execute arbitrary code in the context of a highly privileged account.

GHSA-c74f-9vf5-2gh6

gsd-2017-9629

ICSA-17-187-04 — Schneider Electric Wonderware ArchestrA Logger

The stack-based buffer overflow vulnerability has been identified, which may allow a remote attacker to execute arbitrary code in the context of a highly privileged account.CVE-2017-9629 has been assigned to this vulnerability. Schneider Electric has assigned a CVSS v3 base score of 9.8 to this vulnerability; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The uncontrolled resource consumption vulnerability could allow an attacker to exhaust the memory resources of the machine, causing a denial of service.CVE-2017-9627 has been assigned to this vulnerability. Schneider Electric has assigned a CVSS v3 base score of 8.6 to this vulnerability; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H). The null pointer deference vulnerability could allow an attacker to crash the logger process, causing a denial of service for logging and log-viewing. Schneider Electric notes that applications which use the Wonderware ArchestrA Logger continue to run when the Wonderware ArchestrA Logger service is unavailable.CVE-2017-9631 has been assigned to this vulnerability. Schneider Electric has assigned a CVSS v3 base score of 7.5 to this vulnerability; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).