An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu, SiteScan Web 5.2 and prior. An unquoted search path vulnerability may allow a non-privileged local attacker to change files in the installation directory and execute arbitrary code with elevated privileges.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/100454 | Third Party Advisory VDB Entry |
| https://ics-cert.us-cert.gov/advisories/ICSA-17-234-01 | Mitigation Third Party Advisory US Government Resource |
| https://www.exploit-db.com/exploits/42542/ | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
27 Jul 2021, 19:25
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:carrier:automatedlogic_webctrl:*:*:*:*:*:*:*:* |
Information
Published : 2017-08-25 19:29
Updated : 2023-12-10 12:15
NVD link : CVE-2017-9644
Mitre link : CVE-2017-9644
CVE.ORG link : CVE-2017-9644
JSON object : View
Products Affected
automatedlogic
- i-vu
- sitescan_web
carrier
- automatedlogic_webctrl
CWE
CWE-428
Unquoted Search Path or Element