Schneider Wonderware ArchestrA Logger ICSA-17-187-04 Multiple Security Vulnerabilities

Bugtraq ID:	99488
Class:	Boundary Condition Error
CVE:	CVE-2017-9629 CVE-2017-9627 CVE-2017-9631
Remote:	Yes
Local:	No
Published:	Jul 06 2017 12:00AM
Updated:	Jul 06 2017 12:00AM
Credit:	Andrey Zhukov of USSC
Vulnerable:	Schneider-Electric Wonderware ArchestrA Logger 2017.426.2307.1
Not Vulnerable:	Schneider-Electric Wonderware ArchestrA Logger 2017.517.2328.1

Schneider Wonderware ArchestrA Logger ICSA-17-187-04 Multiple Security Vulnerabilities

Schneider Wonderware ArchestrA Logger is prone to multiple security vulnerabilities.

Attackers can exploit these issues to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely cause denial-of-service conditions.

Schneider Electric Wonderware ArchestrA Logger 2017.426.2307.1 and prior versions are vulnerable.

Schneider Wonderware ArchestrA Logger ICSA-17-187-04 Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Schneider Wonderware ArchestrA Logger ICSA-17-187-04 Multiple Security Vulnerabilities

References:

• Schneider Electric Homepage (Schneider Electric)
  
• ICSA-17-187-04 Schneider Electric Wonderware ArchestrA Logger (CERT)
  
• Wonderware Security Bulletin LFSEC00000116 (Schneider Electric)