VULNERABILITY INTELLIGENCE

CVE-2017-6045

CVSS score7.5 HIGH

EPSS probability1.68%

CISA KEVNot currently listed

Published2017-06-21

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed within the web server application to unauthenticated users. These files may contain sensitive configuration information.

Weakness classification

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-548: Exposure of Information Through Directory Listing

Primary references

ics-cert@hq.dhs.gov — Third Party Advisory, VDB Entry
ics-cert@hq.dhs.gov — Mitigation, Patch, Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Patch, Third Party Advisory, US Government Resource