Summary
Successful exploitation of these vulnerabilities could allow an attacker to read the contents of unexpected files, escalate privileges to system level, execute arbitrary code on the targeted system, bypass security mechanisms, and discover the cryptographic key for the web login.
Vulnerabilities 5
-
Unscored —
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow a vulnerable ActiveX component to be exploite…
-
Unscored —
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure permissions w…
-
Unscored —
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to discover the c…
-
Unscored —
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the VBASE dir…
-
Unscored —
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow input passed in the URL that is not properly …
Revision history
-
#3
ICSA-20-084-01 VISAM Automation Base (VBASE) (Update B)
-
#2
ICSA-20-084-01 VISAM Automation Base (VBASE) (Update A)
-
#1
ICSA-20-084-01 VISAM Automation Base (VBASE)
References
-
ICS Advisory ICSA-20-084-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-084-01
-
Recommended Practices
https://www.us-cert.gov/ncas/tips/ST04-014
-
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B