Sunway ForceControl Multiple Security Vulnerabilities
BID:49747
Info
Sunway ForceControl Multiple Security Vulnerabilities
| Bugtraq ID: | 49747 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 23 2011 12:00AM |
| Updated: | Feb 02 2012 05:00PM |
| Credit: | Luigi Auriemma |
| Vulnerable: |
Sunway ForceControl 6.1 SP3 Sunway ForceControl 6.1 SP2 Sunway ForceControl 6.1 SP1 |
| Not Vulnerable: | |
Discussion
Sunway ForceControl Multiple Security Vulnerabilities
Sunway ForceControl is prone to multiple security vulnerabilities.
Attackers can exploit these issues to execute arbitrary code in the context of the affected application, retrieve arbitrary files outside of the server root directory, or cause denial-of-service conditions; other attacks may also be possible.
Sunway ForceControl versions 6.1 sp3 and prior are vulnerable.
Sunway ForceControl is prone to multiple security vulnerabilities.
Attackers can exploit these issues to execute arbitrary code in the context of the affected application, retrieve arbitrary files outside of the server root directory, or cause denial-of-service conditions; other attacks may also be possible.
Sunway ForceControl versions 6.1 sp3 and prior are vulnerable.
Solution / Fix
Sunway ForceControl Multiple Security Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Sunway ForceControl Multiple Security Vulnerabilities
References:
References:
- Sunway ForceControl Vulnerabilities (Luigi Auriemma)
- Vendor Homepage (Sunway)
- ICS-ALERT-11-266-01 SUNWAY FORCE CONTROL VULNERABILITY (CERT)