Lucene search

IcscertCVE-2017-7910

HistoryJun 14, 2017 - 9:29 p.m.

CVE-2017-7910

2017-06-1421:29:00

CWE-119

CWE-121

icscert

web.nvd.nist.gov

cve-2017-7910

buffer overflow

security vulnerability

digital canal

nvd

denial-of-service attack

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

40.0%

JSON

A Stack-Based Buffer Overflow issue was discovered in Digital Canal Structural Wind Analysis versions 9.1 and prior. An attacker may be able to run arbitrary code by remotely exploiting an executable to perform a denial-of-service attack.

Affected configurations

Nvd

Node

digital_canal_structuralwind_analysisMatch9.1

VendorProductVersionCPE
digital_canal_structuralwind_analysis9.1cpe:2.3:a:digital_canal_structural:wind_analysis:9.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
digital_canal_structural	wind_analysis	9.1	cpe:2.3:a:digital_canal_structural:wind_analysis:9.1:::::::*

CNA Affected

[
  {
    "product": "Digital Canal Structural Wind Analysis",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Digital Canal Structural Wind Analysis"
      }
    ]
  }
]

References

www.securityfocus.com/bid/98976

ics-cert.us-cert.gov/advisories/ICSA-17-157-02

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

40.0%

JSON

Related for CVE-2017-7910