Vulnerability Description
An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed within the web server application to unauthenticated users. These files may contain sensitive configuration information.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Trihedral | Vtscada | <= 11.2.23 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/99066Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-164-01MitigationPatchThird Party Advisory
- http://www.securityfocus.com/bid/99066Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-164-01MitigationPatchThird Party Advisory
FAQ
What is CVE-2017-6045?
CVE-2017-6045 is a vulnerability with a CVSS score of 7.5 (HIGH). An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed within the web server application to unauthenticated users. These files may contain ...
How severe is CVE-2017-6045?
CVE-2017-6045 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-6045?
Check the references section above for vendor advisories and patch information. Affected products include: Trihedral Vtscada.