CVE-2017-6031 | BDVDB-2026-85151 Detail

Certec EDV GmbH atvise scada

Description#

A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. An "improper neutralization of HTTP headers for scripting syntax" issue has been identified, which may allow remote code execution.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-644

References#

https://ics-cert.us-cert.gov/advisories/ICSA-17-096-01A
http://www.securityfocus.com/bid/97479

Exploit#

No public exploit known

History#

Version 12017-05-06Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.