Lucene search

CertccCVE-2011-4056

HistoryJan 08, 2012 - 12:55 a.m.

CVE-2011-4056

2012-01-0800:55:01

certcc

web.nvd.nist.gov

cve-2011-4056

siemens tecnomatix factorylink

actbar.ocx

remote attack

file overwrite

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.003

Percentile

68.5%

JSON

An unspecified ActiveX control in ActBar.ocx in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6 SP1), 7.5.217 (aka 7.5 SP2), and 8.0.2.54 allows remote attackers to create or overwrite arbitrary files via the save method.

Affected configurations

Nvd

Node

siemenstecnomatix_factorylinkMatch6.6.1

siemenstecnomatix_factorylinkMatch7.5.217

siemenstecnomatix_factorylinkMatch8.0.2.54

VendorProductVersionCPE
siemenstecnomatix_factorylink6.6.1cpe:2.3:a:siemens:tecnomatix_factorylink:6.6.1:*:*:*:*:*:*:*
siemenstecnomatix_factorylink7.5.217cpe:2.3:a:siemens:tecnomatix_factorylink:7.5.217:*:*:*:*:*:*:*
siemenstecnomatix_factorylink8.0.2.54cpe:2.3:a:siemens:tecnomatix_factorylink:8.0.2.54:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
siemens	tecnomatix_factorylink	6.6.1	cpe:2.3:a:siemens:tecnomatix_factorylink:6.6.1:::::::*
siemens	tecnomatix_factorylink	7.5.217	cpe:2.3:a:siemens:tecnomatix_factorylink:7.5.217:::::::*
siemens	tecnomatix_factorylink	8.0.2.54	cpe:2.3:a:siemens:tecnomatix_factorylink:8.0.2.54:::::::*

References

www.us-cert.gov/control_systems/pdf/ICSA-11-343-01.pdf

www.usdata.com/sea/factorylink/en/p_nav5.asp

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.003

Percentile

68.5%

JSON

Related for CVE-2011-4056