Test ID:	1.3.6.1.4.1.25623.1.0.811264
Category:	Privilege escalation
Title:	InduSoft Web Studio Privilege Escalation Vulnerability (Aug 2017) - Windows
Summary:	InduSoft Web Studio is prone to a privilege escalation vulnerability.
Description:	Summary: InduSoft Web Studio is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw is due to an incorrect default permissions for a new directory and two files, created on installation. Vulnerability Impact: Successful exploitation will allow local authenticated user to escalate his or her privileges and manipulate certain files. Affected Software/OS: Schneider Electric InduSoft Web Studio before 8.0 Service Pack 1 on Windows. Solution: Upgrade to Schneider Electric InduSoft Web Studio 8.0 Service Pack 1 or later. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-7968 BugTraq ID: 98544 http://www.securityfocus.com/bid/98544 http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2017-090-02 https://ics-cert.us-cert.gov/advisories/ICSA-17-138-02
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.