PT-2018-8547
CVE-2017-9967
·
Published
2018-02-12
·
Updated
2019-10-03
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Schneider Electric's IGSS SCADA Software versions prior to 13
Description
A security misconfiguration issue exists due to improper configuration of security settings such as Address Space Layout Randomization (ASLR) and Data Execution Prevention (DEP), resulting in weak security.
Recommendations
For versions prior to 13, properly configure security settings including Address Space Layout Randomization (ASLR) and Data Execution Prevention (DEP) to strengthen security.
Found an issue in the description? Have something to add? Feel free to write us 👾