CVE-2018-10619
published 2018-06-07CVE-2018-10619: An unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3.90.00 and prior may allow an…
PriorityP349high7.8CVSS 3.0
AVLACLPRLUINSUCHIHAH
EXPLOIT
EPSS
2.76%
84.4th percentile
An unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3.90.00 and prior may allow an authorized, but non-privileged local user to execute arbitrary code and allow a threat actor to escalate user privileges on the affected workstation.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ics-cert | rockwell_automation_rslinx_classic_and_factorytalk_linx_gateway | — | — |
| rockwellautomation | factorytalk_linx_gateway | < 3.90.00 | 3.90.00 |
| rockwellautomation | rslinx_classic | < 3.90.01 | 3.90.01 |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Rockwell Automation RSLinx Classic and FactoryTalk Linx Gateway
cisa_ics·2018-06-07·CVSS 7.8
[HIGH] Rockwell Automation RSLinx Classic and FactoryTalk Linx Gateway
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Rockwell Automation RSLinx Classic and FactoryTalk Linx Gateway
Last RevisedJune 07, 2018
Alert CodeICSA-18-158-01
## 1. EXECUTIVE SUMMARY
- CVSS v3 8.8
- ATTENTION: Low skill level to exploit
- Vendor: Rockwell Automation
- Equipment: RSLinx Classic and FactoryTalk Linx Gateway
- Vulnerability: Unquoted Search Path or Element
## 2. RISK EVALUATION
Successful exploitation of this vulnerability could allow an authorized, but non-privileged local user to execute arbitrary code and allow a threat actor to escalate user privileges on the affected workstation.
## 3. TECHNICAL
GHSA
GHSA-h6f8-572j-wxrc: An unquoted search path or element in RSLinx Classic Versions 3
ghsa_unreviewed·2022-05-13
CVE-2018-10619 [HIGH] CWE-428 GHSA-h6f8-572j-wxrc: An unquoted search path or element in RSLinx Classic Versions 3
An unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3.90.00 and prior may allow an authorized, but non-privileged local user to execute arbitrary code and allow a threat actor to escalate user privileges on the affected workstation.
No detection rules found.
No writeups or analysis indexed.
2018-06-07
Published