CVE-2017-9970

A remote code execution vulnerability exists in Schneider Electric's StruxureOn Gateway versions 1.1.3 and prior

published February 12, 2018

CVSS
—
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

A remote code execution vulnerability exists in Schneider Electric's StruxureOn Gateway versions 1.1.3 and prior. Uploading a zip which contains carefully crafted metadata allows for the file to be uploaded to any directory on the host machine information which could lead to remote code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04839 · 91.9th percentile
Published
2018-02-12T23:00Z
EPSS history
Timeline
  • 12 FEB 23:00Z
    A remote code execution vulnerability exists in Schneider Electric's StruxureOn Gateway versions 1.1.3 and prior
    cvelistv5