CVEvulnerability

CVE-2017-6045

7.5 HIGH Published 2017-06-21 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2017-06-21
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.0 ([email protected]): 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses: CWE-200, CWE-548

Description

An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed within the web server application to unauthenticated users. These files may contain sensitive configuration information.

Affected configurations

• trihedral vtscada (<= 11.2.23)

Weakness · CWE (2)

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
CWE-548 Exposure of Information Through Directory Listing weakness

References

http://www.securityfocus.com/bid/99066 Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-164-01 Mitigation, Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/99066 Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-164-01 Mitigation, Patch, Third Party Advisory, US Government Resource

CVE-2017-6045

Description

Affected configurations

Related

Weakness · CWE (2)

References