High ICSA-17-164-01 3 CVEs

Trihedral Engineering Limited VTScada

Published Jun 13, 2017 · Updated Jun 13, 2017

Vendor: Trihedral Engineering Product: VTScada

Summary

ATTENTION: Remotely exploitable/low skill level to exploit.

Vulnerabilities 3

Unscored —

CVE-2017-6043

A Resource Consumption issue was discovered in Trihedral VTScada Versions prior to 11.2.26. The client does not properl…

Jun 21, 2017
Unscored —

CVE-2017-6045

An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed wit…

Jun 21, 2017
Unscored —

CVE-2017-6053

A Cross-Site Scripting issue was discovered in Trihedral VTScada Versions prior to 11.2.26. A cross-site scripting vuln…

Jun 21, 2017

Revision history

2017-06-13 #1
ICSA-17-164-01 Trihedral VTScada

References

ICS Advisory ICSA-17-164-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-164-01
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-17-164-01