This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2017-7968 | BDVDB-2026-85606 Detail

Schneider Electric Wonderware InduSoft Web Studio

Description#

An Incorrect Default Permissions issue was discovered in Schneider Electric Wonderware InduSoft Web Studio v8.0 Patch 3 and prior versions. Upon installation, Wonderware InduSoft Web Studio creates a new directory and two files, which are placed in the system's path and can be manipulated by non-administrators. This could allow an authenticated user to escalate his or her privileges.

Impact#

No impact statement in the source data.

Weaknesses#

  • CWE-276 Incorrect Default Permissions

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.