CVE-2017-7968CWE-276

An Incorrect Default Permissions issue was discovered in Schneider Electric Wonderware InduSoft Web Studio v8.0 Patch 3 and prior versions

published May 19, 2017

CVSS
—
EPSS
0%
Percentile
36.2
In the wild
Unconfirmed
What it is

An Incorrect Default Permissions issue was discovered in Schneider Electric Wonderware InduSoft Web Studio v8.0 Patch 3 and prior versions. Upon installation, Wonderware InduSoft Web Studio creates a new directory and two files, which are placed in the system's path and can be manipulated by non-administrators. This could allow an authenticated user to escalate his or her privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00432 · 36.2th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2017-05-19T15:00Z
EPSS history
Timeline
  • 19 MAY 15:00Z
    An Incorrect Default Permissions issue was discovered in Schneider Electric Wonderware InduSoft Web Studio v8.0 Patch 3 and prior versions
    cvelistv5