CVE-2017-12728CWE-269

An Improper Privilege Management issue was discovered in SpiderControl SCADA Web Server Version 2.02.0007 and prior

published October 4, 2017

CVSS
—
EPSS
0%
Percentile
31.4
In the wild
Unconfirmed
What it is

An Improper Privilege Management issue was discovered in SpiderControl SCADA Web Server Version 2.02.0007 and prior. Authenticated, non-administrative local users are able to alter service executables with escalated privileges, which could allow an attacker to execute arbitrary code under the context of the current system services.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00388 · 31.4th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2017-10-04T07:00Z
EPSS history
Timeline
  • 04 OCT 07:00Z
    An Improper Privilege Management issue was discovered in SpiderControl SCADA Web Server Version 2.02.0007 and prior
    cvelistv5