Clorius Controls ICS SCADA Information Disclosure Vulnerability

Bugtraq ID:	58800
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 01 2013 12:00AM
Updated:	Apr 01 2013 12:00AM
Credit:	Darius Freamon
Vulnerable:	Clorius Controls A/S ICS SCADA 00.00.0110 Clorius Controls A/S ICS SCADA 00.00.0095
Not Vulnerable:

Clorius Controls ICS SCADA Information Disclosure Vulnerability

Clorius Controls ICS SCADA is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to obtain potentially sensitive information.

Clorius Controls ICS SCADA Information Disclosure Vulnerability

An attacker can exploit this issue using a web browser.

Clorius Controls ICS SCADA Information Disclosure Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Clorius Controls ICS SCADA Information Disclosure Vulnerability

References:

• Clorius Controls HomePage (Clorius Controls A/S)
  
• Two minor vulnerabilities in Clorius Controls ICS SCADA ([email protected])
  
• ICS-ALERT-13-091-02�??CLORIUS CONTROLS ICS SCADA INFORMATION EXPOSURE (ICS-CERT)