VULNERABILITY INTELLIGENCE

CVE-2017-7972

CVSS score5.5 MEDIUM

EPSS probability0.46%

CISA KEVNot currently listed

Published2017-09-26

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Description

A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the ability to escape out of remote PowerSCADA Anywhere applications and launch other processes.

Primary references

cybersecurity@se.com — Mitigation, Patch, Vendor Advisory
cybersecurity@se.com — Third Party Advisory, VDB Entry
cybersecurity@se.com — Issue Tracking, Mitigation, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Mitigation, Patch, Vendor Advisory