Vulnerability CVE-2017-9628

Vulnerability CVE-2017-9628

Published: 2017-10-04 Modified: 2017-10-05

Description:

An Information Exposure issue was discovered in Saia Burgess Controls PCD Controllers with PCD firmware versions prior to 1.28.16 or 1.24.69. In certain circumstances, the device pads Ethernet frames with memory contents.

Type:

CWE-200

(Information Exposure)

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)

CVSS Base Score	Impact Subscore	Exploitability Subscore
5/10	2.9/10	10/10

Exploit range	Attack complexity	Authentication
Remote	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Partial	None	None

Affected software
Saia burgess controls -> Pcd controllers firmware

References:

http://www.securityfocus.com/bid/100949

https://ics-cert.us-cert.gov/advisories/ICSA-17-234-05

Copyright 2024, cxsecurity.com