CVE-2017-9962 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Clearscada
Severity
7.5HIGHNVD
EPSS
0.6%
top 31.50%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 26
Latest updateMay 14
Description
Schneider Electric's ClearSCADA versions released prior to August 2017 are susceptible to a memory allocation vulnerability, whereby malformed requests can be sent to ClearSCADA client applications to cause unexpected behavior. Client applications affected include ViewX and the Server Icon.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6
Affected Packages2 packages
🔴Vulnerability Details
2GHSA▶
GHSA-8rrf-cfx9-434w: Schneider Electric's ClearSCADA versions released prior to August 2017 are susceptible to a memory allocation vulnerability, whereby malformed request↗2022-05-14
CVEList▶
CVE-2017-9962: Schneider Electric's ClearSCADA versions released prior to August 2017 are susceptible to a memory allocation vulnerability, whereby malformed request↗2017-09-25
📋Vendor Advisories
1💬Community
1Bugzilla▶
CVE-2020-14300 docker: Security regression of CVE-2016-9962 due to inclusion of vulnerable runc↗2020-06-19