CVEブラウザに戻る

CVE-2018-10619

HIGH

7.8

CVSS Severity Score

EPSS Score0.1760%

EPSS Percentile0.72th

Published2018年6月7日

Last Modified2024年11月21日

Vulnerability Description

An unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3.90.00 and prior may allow an authorized, but non-privileged local user to execute arbitrary code and allow a threat actor to escalate user privileges on the affected workstation.

Affected Platforms (CPE)

📦

Rockwellautomation

Rslinx Classic

< 3.90.01

📦

Rockwellautomation

Factorytalk Linx Gateway

< 3.90.00

References & Advisories

🔗 http://www.securityfocus.com/bid/104415

🔗 https://ics-cert.us-cert.gov/advisories/ICSA-18-158-01

🔗 https://www.exploit-db.com/exploits/44892/

🔗 http://www.securityfocus.com/bid/104415

🔗 https://ics-cert.us-cert.gov/advisories/ICSA-18-158-01

🔗 https://www.exploit-db.com/exploits/44892/

関連する脆弱性情報

CVE-2018-148299.8

Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote threat actor to intentionally...

CVE-2020-120019.8

FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and p...

CVE-2019-65539.8

A vulnerability was found in Rockwell Automation RSLinx Classic versions 4.10.00 and prior. An input validation issue in a .dll fi...

CVE-2011-25309.3

Buffer overflow in RSEds.dll in RSHWare.exe in the EDS Hardware Installation Tool 1.0.5.1 and earlier in Rockwell Automation RSLin...