OSVDB ID: 82014

Title: DeltaV Multiple Product Unspecified ActiveX Arbitrary File Overwrite

Info

Disclosure
May 17, 2012

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Unknown

Description

 Multiple DeltaV products contain a flaw that is triggered by an insecure method within an unspecified ActiveX control, which may allow an attacker to overwrite arbitrary files.

Classification

 Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Patch / RCS
Exploit: Exploit Private
Disclosure: Vendor Verified
OSVDB: SCADA

Solution

 Currently, there are no known workarounds or upgrades to correct this issue. However, the vendor has released a patch to address this vulnerability.

Products

Emerson Electric Co.

DeltaV Workstations

 9.3.1
10.3.1
11.3
11.3.1

DeltaV

 9.3.1
10.3.1
11.3
11.3.1

DeltaV ProEssentials Scientific Graph

 5.0.0.6

References

Credit

Unknown or Incomplete


Direct URL: http://osvdb.org/82014