CVE-2018-1168

2018-02-2114:00:00

CWE-284

zdi

www.cve.org

EPSS

0.001

Percentile

23.4%

JSON

This vulnerability allows local attackers to escalate privileges on vulnerable installations of ABB MicroSCADA 9.3 with FP 1-2-3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of the access controls for the installed product files. The installation procedure leaves critical files open to manipulation by any authenticated user. An attacker can leverage this vulnerability to escalate privileges to SYSTEM. Was ZDI-CAN-5097.

CNA Affected

[
  {
    "product": "ABB MicroSCADA",
    "vendor": "ABB",
    "versions": [
      {
        "status": "affected",
        "version": "9.3 with FP 1-2-3"
      }
    ]
  }
]

References

library.e.abb.com/public/7a88a74b12bb492ea138b1f2365d00f6/ABBVU-PGGA-33888_ABB_SoftwareVulnerabilityHandlingAdvisory_Rev_A.pdf?x-sign=MJfu9cHtRUUubpLAYzyWFTmW5W+mg3kZ/nm7F/Jw5HlFTQf4eNyfLAgE8HozRJEC

zerodayinitiative.com/advisories/ZDI-18-141

EPSS

0.001

Percentile

23.4%

JSON

Related for CVELIST:CVE-2018-1168