ID de Prueba:	1.3.6.1.4.1.25623.1.0.811264
Categoría:	Privilege escalation
Título:	InduSoft Web Studio Privilege Escalation Vulnerability (Aug 2017) - Windows
Resumen:	InduSoft Web Studio is prone to a privilege escalation vulnerability.
Descripción:	Summary: InduSoft Web Studio is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw is due to an incorrect default permissions for a new directory and two files, created on installation. Vulnerability Impact: Successful exploitation will allow local authenticated user to escalate his or her privileges and manipulate certain files. Affected Software/OS: Schneider Electric InduSoft Web Studio before 8.0 Service Pack 1 on Windows. Solution: Upgrade to Schneider Electric InduSoft Web Studio 8.0 Service Pack 1 or later. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-7968 BugTraq ID: 98544 http://www.securityfocus.com/bid/98544 http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2017-090-02 https://ics-cert.us-cert.gov/advisories/ICSA-17-138-02
Copyright	Copyright (C) 2017 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.