deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-12263
Published: 2017-10-05
Description: A vulnerability in the web interface of Cisco License Manager software could allow an unauthenticated, remote attacker to download and view files within the application that should be restricted, aka Directory Traversal. The issue is due to improper sanitization of user-supplied input in HTTP request parameters that describe filenames. An attacker could exploit this vulnerability by using directory traversal techniques to submit a path to a desired file location. An exploit could allow the attacker to view application files that may contain sensitive information. Cisco Bug IDs: CSCvd83577.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: http://www.securityfocus.com/bid/101169; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-clm; http://www.securityfocus.com/bid/101169
CVE: CVE-2017-12264
Published: 2017-10-05
Description: A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient bound checks performed by the affected software. An attacker could exploit this vulnerability by sending a malicious HTTP packet to the affected system. A successful exploit could allow the attacker to cause a reload of the Web Admin Server. Cisco Bug IDs: CSCve89149.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/101148; http://www.securitytracker.com/id/1039506; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-cms
CVE: CVE-2017-12265
Published: 2017-10-05
Description: A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device, aka HREF XSS. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. The vulnerability exists in the Cisco Adaptive Security Appliance (ASA) Software when the WEBVPN feature is enabled. Cisco Bug IDs: CSCve91068.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/101170; http://www.securitytracker.com/id/1039502; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-asa1
CVE: CVE-2017-12266
Published: 2017-10-05
Description: A vulnerability in the routine that loads DLL files in Cisco Meeting App for Windows could allow an authenticated, local attacker to run an executable file with privileges equivalent to those of Cisco Meeting App. The vulnerability is due to incomplete input validation of the path name for DLL files before they are loaded. An attacker could exploit this vulnerability by installing a crafted DLL file in a specific system directory. A successful exploit could allow the attacker to execute commands on the underlying Microsoft Windows host with privileges equivalent to those of Cisco Meeting App. The attacker would need valid user credentials to exploit this vulnerability. Cisco Bug IDs: CSCvd77907.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-264, CWE-427
References: http://www.securityfocus.com/bid/101158; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-cma; http://www.securityfocus.com/bid/101158
CVE: CVE-2017-12267
Published: 2017-10-05
Description: A vulnerability in the Independent Computing Architecture (ICA) accelerator feature for the Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause an ICA application optimization-related process to restart, resulting in a partial denial of service (DoS) condition. The vulnerability is due to improperly aborting a connection when an unexpected protocol packet is received. An attacker could exploit this vulnerability by sending a crafted ICA traffic through the targeted device. A successful exploit could allow the attacker to cause a DoS condition that is due to a process unexpectedly restarting. The Cisco WAAS could drop ICA traffic while the process is restarting. This vulnerability affects Cisco Wide Area Application Services (WAAS) and Cisco Virtual Wide Area Application Services (vWAAS). Cisco Bug IDs: CSCve74457.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-119
References: http://www.securityfocus.com/bid/101176; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-waas1; http://www.securityfocus.com/bid/101176
CVE: CVE-2017-12268
Published: 2017-10-05
Description: A vulnerability in the Network Access Manager (NAM) of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to enable multiple network adapters, aka a Dual-Homed Interface vulnerability. The vulnerability is due to insufficient NAM policy enforcement. An attacker could exploit this vulnerability by manipulating network interfaces of the device to allow multiple active network interfaces. A successful exploit could allow the attacker to send traffic over a non-authorized network interface. Cisco Bug IDs: CSCvf66539.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/101157; http://www.securitytracker.com/id/1039507; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-anam
CVE: CVE-2017-12269
Published: 2017-10-05
Description: A vulnerability in the web UI of Cisco Spark Messaging Software could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack. The vulnerability is due to insufficient input validation by the web UI of the affected software. An attacker could exploit this vulnerability by injecting XSS content into the web UI of the affected software. A successful exploit could allow the attacker to force a user to execute code of the attacker's choosing or allow the attacker to retrieve sensitive information from the user. Cisco Bug IDs: CSCvf70587, CSCvf70592.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/101150; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-sprk; http://www.securityfocus.com/bid/101150
CVE: CVE-2017-12270
Published: 2017-10-05
Description: A vulnerability in the gRPC code of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition when the emsd service stops. The vulnerability is due to the software's inability to process HTTP/2 packets. An attacker could exploit this vulnerability by sending a malformed HTTP/2 frame to the affected device. A successful exploit could allow the attacker to create a DoS condition when the emsd service stops. Cisco Bug IDs: CSCvb99388.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: http://www.securityfocus.com/bid/101171; http://www.securitytracker.com/id/1039504; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-ncs
CVE: CVE-2017-15032
Published: 2017-10-05
Description: ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-772
References: https://github.com/ImageMagick/ImageMagick/commit/241988ca28139ad970c1d9717c419f41e360ddb0; https://usn.ubuntu.com/3681-1/; https://github.com/ImageMagick/ImageMagick/commit/241988ca28139ad970c1d9717c419f41e360ddb0
CVE: CVE-2017-15033
Published: 2017-10-05
Description: ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: https://github.com/ImageMagick/ImageMagick/commit/ef8f40689ac452398026c07da41656a7c87e4683; https://usn.ubuntu.com/3681-1/; https://github.com/ImageMagick/ImageMagick/commit/ef8f40689ac452398026c07da41656a7c87e4683
CVE: CVE-2017-15035
Published: 2017-10-05
Description: EmTec PyroBatchFTP before 3.18 allows remote servers to cause a denial of service (application crash).
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://www.7elements.co.uk/resources/technical-advisories/pyrobatchftp-buffer-overflow-seh-overwrite/; https://www.emtec.com/downloads/pyrobatchftp/pyrobatchftp318_changes.txt; https://www.exploit-db.com/exploits/42962/
CVE: CVE-2017-15037
Published: 2017-10-05
Description: In FreeBSD through 11.1, the smb_strdupin function in sys/netsmb/smb_subr.c has a race condition with a resultant out-of-bounds read, because it can cause t2p->t_name strings to lack a final '\0' character.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125, CWE-362
References: http://www.securityfocus.com/bid/101191; https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222687; https://svnweb.freebsd.org/base?view=revision&revision=324102
CVE: CVE-2017-14353
Published: 2017-10-05
Description: A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, could be remotely exploited to allow code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/bid/101251; https://softwaresupport.hpe.com/km/KM02977984; https://www.auscert.org.au/bulletins/53150
CVE: CVE-2017-14354
Published: 2017-10-05
Description: A remote cross-site scripting vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33 could be remotely exploited to allow cross-site scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/101254; https://softwaresupport.hpe.com/km/KM02977984; https://www.auscert.org.au/bulletins/53150
CVE: CVE-2016-8937
Published: 2017-10-05
Description: The IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) default authentication protocol is vulnerable to a brute force attack due to disclosing too much information during authentication. An attacker could gain user or administrative access to the TSM server. IBM X-Force ID: 118750.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.ibm.com/support/docview.wss?uid=swg22007935; https://exchange.xforce.ibmcloud.com/vulnerabilities/118750; http://www.ibm.com/support/docview.wss?uid=swg22007935
CVE: CVE-2017-1201
Published: 2017-10-05
Description: IBM BigFix Compliance Analytics 1.9.79 (TEMA SUAv1 SCA SCM) stores user credentials in clear text which can be read by a local user. IBM X-Force ID: 123676.
CVSS Score: 7.8 (HIGH)
CWE: CWE-522
References: http://www.ibm.com/support/docview.wss?uid=swg22008114; https://exchange.xforce.ibmcloud.com/vulnerabilities/123676; http://www.ibm.com/support/docview.wss?uid=swg22008114
CVE: CVE-2017-1301
Published: 2017-10-05
Description: IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM Spectrum Protect Backup-archive Client creates temporary files insecurely. A local attacker could exploit this vulnerability by creating a symbolic link from a temporary file to various files on the system, which could allow the attacker to overwrite arbitrary files on the system with elevated privileges. IBM X-Force ID: 125163.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: http://www.ibm.com/support/docview.wss?uid=swg22006248; http://www.securityfocus.com/bid/101107; https://exchange.xforce.ibmcloud.com/vulnerabilities/125163
CVE: CVE-2017-1339
Published: 2017-10-05
Description: IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password. A database administrator may be able to decrypt the IBM Spectrum protect client or administrator password which can result in information disclosure or a denial of service. IBM X-Force ID: 126247.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-327
References: http://www.ibm.com/support/docview.wss?uid=swg22007936; http://www.securityfocus.com/bid/101113; http://www.securitytracker.com/id/1039498
CVE: CVE-2017-1378
Published: 2017-10-05
Description: IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be obtained by a local user. IBM X-Force ID: 126875.
CVSS Score: 7.8 (HIGH)
CWE: CWE-522
References: http://www.ibm.com/support/docview.wss?uid=swg22006215; https://exchange.xforce.ibmcloud.com/vulnerabilities/126875; http://www.ibm.com/support/docview.wss?uid=swg22006215
CVE: CVE-2017-1522
Published: 2017-10-05
Description: IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129832.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22008162; https://exchange.xforce.ibmcloud.com/vulnerabilities/129832; http://www.ibm.com/support/docview.wss?uid=swg22008162
CVE: CVE-2017-12106
Published: 2017-10-05
Description: A memory corruption vulnerability exists in the .TGA parsing functionality of Computerinsel Photoline 20.02. A specially crafted .TGA file can cause an out of bounds write resulting in potential code execution. An attacker can send a specific .TGA file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101189; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0458; http://www.securityfocus.com/bid/101189
CVE: CVE-2017-2880
Published: 2017-10-05
Description: An memory corruption vulnerability exists in the .GIF parsing functionality of Computerinsel Photoline 20.02. A specially crafted .GIF file can cause a vulnerability resulting in potential code execution. An attacker can send specific .GIF file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101188; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0387; http://www.securityfocus.com/bid/101188
CVE: CVE-2017-2920
Published: 2017-10-05
Description: An memory corruption vulnerability exists in the .SVG parsing functionality of Computerinsel Photoline 20.02. A specially crafted .SVG file can cause a vulnerability resulting in memory corruption, which can potentially lead to arbitrary code execution. An attacker can send a specific .SVG file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101186; https://github.com/libofx/libofx/commit/a70934eea95c76a7737b83773bffe[PII_REDACTED]d; https://security.gentoo.org/glsa/201908-26
CVE: CVE-2017-12732
Published: 2017-10-05
Description: A Stack-based Buffer Overflow issue was discovered in GE CIMPLICITY Versions 9.0 and prior. A function reads a packet to indicate the next packet length. The next packet length is not verified, allowing a buffer overwrite that could lead to an arbitrary remote code execution.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-121, CWE-119
References: http://www.securityfocus.com/bid/101174; https://ics-cert.us-cert.gov/advisories/ICSA-17-278-01; http://www.securityfocus.com/bid/101174
CVE: CVE-2017-13992
Published: 2017-10-05
Description: An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not utilize sufficiently random number generation for the web interface authentication mechanism, which could allow remote code execution.
CVSS Score: 8.1 (HIGH)
CWE: CWE-331, CWE-331
References: http://www.securityfocus.com/bid/100847; https://ics-cert.us-cert.gov/advisories/ICSA-17-257-01; http://www.securityfocus.com/bid/100847
CVE: CVE-2017-13994
Published: 2017-10-05
Description: A Cross-site Scripting issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web interface lacks proper web request validation, which could allow XSS attacks to occur if an authenticated user of the web interface is tricked into clicking a malicious link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/100847; https://ics-cert.us-cert.gov/advisories/ICSA-17-257-01; http://www.securityfocus.com/bid/100847
CVE: CVE-2017-13996
Published: 2017-10-05
Description: A Relative Path Traversal issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web user interface fails to prevent access to critical files that non administrative users should not have access to, which could allow an attacker to create or modify files or execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-23, CWE-22
References: http://www.securityfocus.com/bid/100847; https://ics-cert.us-cert.gov/advisories/ICSA-17-257-01; http://www.securityfocus.com/bid/100847
CVE: CVE-2017-13998
Published: 2017-10-05
Description: An Insufficiently Protected Credentials issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not sufficiently protect sensitive information from unauthorized access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522, CWE-522
References: http://www.securityfocus.com/bid/100847; https://ics-cert.us-cert.gov/advisories/ICSA-17-257-01; http://www.securityfocus.com/bid/100847
CVE: CVE-2017-15041
Published: 2017-10-05
Description: Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom domains, it is possible to arrange things so that example.com/pkg1 points to a Subversion repository but example.com/pkg1/pkg2 points to a Git repository. If the Subversion repository includes a Git checkout in its pkg2 directory and some other work is done to ensure the proper ordering of operations, "go get" can be tricked into reusing this Git checkout for the fetch of code from pkg2. If the Subversion repository's Git checkout has malicious commands in .git/hooks/, they will execute on the system running "go get."
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/101196; https://access.redhat.com/errata/RHSA-2017:3463; https://access.redhat.com/errata/RHSA-2018:0878
CVE: CVE-2017-15042
Published: 2017-10-05
Description: An unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1. RFC 4954 requires that, during SMTP, the PLAIN auth scheme must only be used on network connections secured with TLS. The original implementation of smtp.PlainAuth in Go 1.0 enforced this requirement, and it was documented to do so. In 2013, upstream issue #5184, this was changed so that the server may decide whether PLAIN is acceptable. The result is that if you set up a man-in-the-middle SMTP server that doesn't advertise STARTTLS and does advertise that PLAIN auth is OK, the smtp.PlainAuth implementation sends the username and password.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-319
References: http://www.securityfocus.com/bid/101197; https://access.redhat.com/errata/RHSA-2017:3463; https://access.redhat.com/errata/RHSA-2018:0878
CVE: CVE-2017-14083
Published: 2017-10-06
Description: A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to download the OfficeScan encryption file.
CVSS Score: 7.5 (HIGH)
References: http://hyp3rlinx.altervista.org/advisories/CVE-2017-14083-TRENDMICRO-OFFICESCAN-XG-PRE-AUTH-REMOTE-ENCRYPTION-KEY-DISCLOSURE.txt; http://packetstormsecurity.com/files/144398/TrendMicro-OfficeScan-11.0-XG-12.0-Encryption-Key-Disclosure.html; http://seclists.org/fulldisclosure/2017/Sep/90
CVE: CVE-2017-14084
Published: 2017-10-06
Description: A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary code on vulnerable installations.
CVSS Score: 8.1 (HIGH)
References: http://hyp3rlinx.altervista.org/advisories/CVE-2017-14084-TRENDMICRO-OFFICESCAN-XG-CURL-MITM-REMOTE-CODE-EXECUTION.txt; http://packetstormsecurity.com/files/144400/TrendMicro-OfficeScan-11.0-XG-12.0-Man-In-The-Middle.html; http://seclists.org/fulldisclosure/2017/Sep/87
CVE: CVE-2017-14085
Published: 2017-10-06
Description: Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to query the network's NT domain or the PHP version and modules.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://hyp3rlinx.altervista.org/advisories/CVE-2017-14085-TRENDMICRO-OFFICESCAN-XG-REMOTE-NT-DOMAIN-PHP-INFO-DISCLOSURE.txt; http://packetstormsecurity.com/files/144402/TrendMicro-OfficeScan-11.0-XG-12.0-Information-Disclosure.html; http://seclists.org/fulldisclosure/2017/Sep/85
CVE: CVE-2017-14086
Published: 2017-10-06
Description: Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to start the fcgiOfcDDA.exe executable or cause a potential INI corruption, which may cause the server disk space to be consumed with dump files from continuous HTTP requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://hyp3rlinx.altervista.org/advisories/CVE-2017-14086-TRENDMICRO-OFFICESCAN-XG-PRE-AUTH-START-REMOTE-PROCESS-CODE-EXECUTION-MEM-CORRUPT.txt; http://packetstormsecurity.com/files/144401/TrendMicro-OfficeScan-11.0-XG-12.0-Auth-Start-Code-Execution.html; http://seclists.org/fulldisclosure/2017/Sep/88
CVE: CVE-2017-14087
Published: 2017-10-06
Description: A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an attacker to spoof a particular Host header, allowing the attacker to render arbitrary links that point to a malicious website with poisoned Host header webpages.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://hyp3rlinx.altervista.org/advisories/CVE-2017-14087-TRENDMICRO-OFFICESCAN-XG-HOST-HEADER-INJECTION.txt; http://packetstormsecurity.com/files/144404/TrendMicro-OfficeScan-11.0-XG-12.0-Host-Header-Injection.html; http://seclists.org/fulldisclosure/2017/Sep/86
CVE: CVE-2017-14088
Published: 2017-10-06
Description: Memory Corruption Privilege Escalation vulnerabilities in Trend Micro OfficeScan 11.0 and XG allows local attackers to execute arbitrary code and escalate privileges to resources normally reserved for the kernel on vulnerable installations by exploiting tmwfp.sys. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit the vulnerability.
CVSS Score: 7.0 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101070; http://www.securitytracker.com/id/1039500; http://www.zerodayinitiative.com/advisories/ZDI-17-828
CVE: CVE-2017-14089
Published: 2017-10-06
Description: An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access the OfficeScan server to target cgiShowClientAdm.exe and cause memory corruption issues.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://hyp3rlinx.altervista.org/advisories/CVE-2017-14089-TRENDMICRO-OFFICESCAN-XG-PRE-AUTH-REMOTE-MEMORY-CORRUPTION.txt; http://packetstormsecurity.com/files/144464/TrendMicro-OfficeScan-11.0-XG-12.0-Memory-Corruption.html; http://seclists.org/fulldisclosure/2017/Sep/91
CVE: CVE-2017-12730
Published: 2017-10-06
Description: An Unquoted Search Path issue was discovered in mySCADA myPRO Versions 7.0.26 and prior. Application services utilize unquoted search path elements, which could allow an attacker to execute arbitrary code with elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428, CWE-428
References: http://www.securityfocus.com/bid/100815; https://ics-cert.us-cert.gov/advisories/ICSA-17-255-01; http://www.securityfocus.com/bid/100815