CVE-2018-1168

{"id": "CVE-2018-1168", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2018-02-21T14:29:00.580", "references": [{"url": "https://library.e.abb.com/public/7a88a74b12bb492ea138b1f2365d00f6/ABBVU-PGGA-33888_ABB_SoftwareVulnerabilityHandlingAdvisory_Rev_A.pdf?x-sign=MJfu9cHtRUUubpLAYzyWFTmW5W+mg3kZ/nm7F/Jw5HlFTQf4eNyfLAgE8HozRJEC", "tags": ["Mitigation", "Vendor Advisory"], "source": "zdi-disclosures@trendmicro.com"}, {"url": "https://zerodayinitiative.com/advisories/ZDI-18-141", "tags": ["Third Party Advisory", "VDB Entry"], "source": "zdi-disclosures@trendmicro.com"}, {"url": "https://library.e.abb.com/public/7a88a74b12bb492ea138b1f2365d00f6/ABBVU-PGGA-33888_ABB_SoftwareVulnerabilityHandlingAdvisory_Rev_A.pdf?x-sign=MJfu9cHtRUUubpLAYzyWFTmW5W+mg3kZ/nm7F/Jw5HlFTQf4eNyfLAgE8HozRJEC", "tags": ["Mitigation", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://zerodayinitiative.com/advisories/ZDI-18-141", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "zdi-disclosures@trendmicro.com", "description": [{"lang": "en", "value": "CWE-284"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-732"}]}], "descriptions": [{"lang": "en", "value": "This vulnerability allows local attackers to escalate privileges on vulnerable installations of ABB MicroSCADA 9.3 with FP 1-2-3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of the access controls for the installed product files. The installation procedure leaves critical files open to manipulation by any authenticated user. An attacker can leverage this vulnerability to escalate privileges to SYSTEM. Was ZDI-CAN-5097."}, {"lang": "es", "value": "Esta vulnerabilidad permite que los atacantes locales escalen privilegios en instalaciones vulnerables de ABB MicroSCADA 9.3 con FP 1-2-3. En primer lugar, un atacante debe obtener la capacidad de ejecutar c\u00f3digo de bajos privilegios en el sistema objetivo para explotar esta vulnerabilidad. Este error en concreto existe en la configuraci\u00f3n de los controles de acceso para los archivos del producto instalados. El procedimiento de instalaci\u00f3n hace que archivos cr\u00edticos queden expuestos a ser manipulados por parte de cualquier usuario autenticado. Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios a SYSTEM. Anteriormente era ZDI-CAN-5097."}], "lastModified": "2024-11-21T03:59:19.467", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hitachienergy:sys600_firmware:9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "89464622-0CF4-4FE0-AE85-441254354707"}, {"criteria": "cpe:2.3:o:hitachienergy:sys600_firmware:9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B3274F16-5E31-4E62-85FB-E068C11C66F1"}, {"criteria": "cpe:2.3:o:hitachienergy:sys600_firmware:9.1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F2345B9D-4D12-47C3-850B-58D4C57EC31C"}, {"criteria": "cpe:2.3:o:hitachienergy:sys600_firmware:9.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "277E4664-6850-4AB1-96D3-FF0DF8A0CBF7"}, {"criteria": "cpe:2.3:o:hitachienergy:sys600_firmware:9.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8B4C2E8B-5F82-4157-B40F-72193241C2B1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hitachienergy:sys600:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "42B6499F-D82D-4B02-BBEC-60B36FB0C678"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "zdi-disclosures@trendmicro.com"}