Vulnerability-Lookup

CNVD-2017-03833

Vulnerability from cnvd - Published: 2017-04-02

Title

Schneider Electric ClearSCADA拒绝服务漏洞

Description

Schneider Electric ClearSCADA是开放软件平台，可以远程管理关键架构。 Schneider Electric ClearSCADA存在输入验证漏洞，攻击者发送构造的命令及数据包序列，可造成服务器进程停止。

Severity

中

Patch Name

Schneider Electric ClearSCADA拒绝服务漏洞的补丁

Patch Description

Schneider Electric ClearSCADA是开放软件平台，可以远程管理关键架构。 Schneider Electric ClearSCADA存在输入验证漏洞，攻击者发送构造的命令及数据包序列，可造成服务器进程停止。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://resourcecenter.controlmicrosystems.com/display/CS/SCADA+Expert+ClearSCADA+Downloadshttp://www.schneider-electric.com/en/download/document/SEVD-2017-060-01/

Reference

http://www.nsfocus.net/vulndb/36057 http://www.securityfocus.com/bid/96768

Impacted products

Name
Schneider Electric ClearSCADA

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "96768"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-6021",
      "cveUrl": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6021"
    }
  },
  "description": "Schneider Electric ClearSCADA\u662f\u5f00\u653e\u8f6f\u4ef6\u5e73\u53f0\uff0c\u53ef\u4ee5\u8fdc\u7a0b\u7ba1\u7406\u5173\u952e\u67b6\u6784\u3002\r\n\r\nSchneider Electric ClearSCADA\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53d1\u9001\u6784\u9020\u7684\u547d\u4ee4\u53ca\u6570\u636e\u5305\u5e8f\u5217\uff0c\u53ef\u9020\u6210\u670d\u52a1\u5668\u8fdb\u7a0b\u505c\u6b62\u3002",
  "discovererName": "Sergey Temnikov and Vladimir Dashchenko of Kapersky Lab\u00e2??s Critical Infrastructure Defense Team",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u8fd9\u4e2a\u5b89\u5168\u95ee\u9898\uff0c\u8bf7\u5230\u5382\u5546\u7684\u4e3b\u9875\u4e0b\u8f7d\uff1a\r\nhttp://resourcecenter.controlmicrosystems.com/display/CS/SCADA+Expert+ClearSCADA+Downloadshttp://www.schneider-electric.com/en/download/document/SEVD-2017-060-01/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-03833",
  "openTime": "2017-04-02",
  "patchDescription": "Schneider Electric ClearSCADA\u662f\u5f00\u653e\u8f6f\u4ef6\u5e73\u53f0\uff0c\u53ef\u4ee5\u8fdc\u7a0b\u7ba1\u7406\u5173\u952e\u67b6\u6784\u3002\r\n\r\nSchneider Electric ClearSCADA\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53d1\u9001\u6784\u9020\u7684\u547d\u4ee4\u53ca\u6570\u636e\u5305\u5e8f\u5217\uff0c\u53ef\u9020\u6210\u670d\u52a1\u5668\u8fdb\u7a0b\u505c\u6b62\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Schneider Electric ClearSCADA\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Schneider Electric ClearSCADA"
  },
  "referenceLink": "http://www.nsfocus.net/vulndb/36057\r\nhttp://www.securityfocus.com/bid/96768",
  "serverity": "\u4e2d",
  "submitTime": "2017-03-16",
  "title": "Schneider Electric ClearSCADA\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}

CVE-2017-6021 (GCVE-0-2017-6021)

Vulnerability from cvelistv5 – Published: 2018-05-14 14:00 – Updated: 2024-09-16 22:56

Summary

In Schneider Electric ClearSCADA 2014 R1 (build 75.5210) and prior, 2014 R1.1 (build 75.5387) and prior, 2015 R1 (build 76.5648) and prior, and 2015 R2 (build 77.5882) and prior, an attacker with network access to the ClearSCADA server can send specially crafted sequences of commands and data packets to the ClearSCADA server that can cause the ClearSCADA server process and ClearSCADA communications driver processes to terminate. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Severity

No CVSS data available.

CWE

CWE-20 - IMPROPER INPUT VALIDATION CWE-20

Assigner

icscert icscert root

References

2 references

URL	Tags
http://www.securityfocus.com/bid/96768	vdb-entryx_refsource_BID
https://ics-cert.us-cert.gov/advisories/ICSA-17-068-01	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Schneider Electric SE	ClearSCADA	Affected: 2014 R1 (build 75.5210) and prior Affected: 2014 R1.1 (build 75.5387) and prior Affected: 2015 R1 (build 76.5648) and prior Affected: 2015 R2 (build 77.5882) and prior

Date Public

2017-03-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:18:49.489Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "96768",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96768"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-068-01"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "ClearSCADA",
          "vendor": "Schneider Electric SE",
          "versions": [
            {
              "status": "affected",
              "version": "2014 R1 (build 75.5210) and prior"
            },
            {
              "status": "affected",
              "version": "2014 R1.1 (build 75.5387) and prior"
            },
            {
              "status": "affected",
              "version": "2015 R1 (build 76.5648) and prior"
            },
            {
              "status": "affected",
              "version": "2015 R2 (build 77.5882) and prior"
            }
          ]
        }
      ],
      "datePublic": "2017-03-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Schneider Electric ClearSCADA 2014 R1 (build 75.5210) and prior, 2014 R1.1 (build 75.5387) and prior, 2015 R1 (build 76.5648) and prior, and 2015 R2 (build 77.5882) and prior, an attacker with network access to the ClearSCADA server can send specially crafted sequences of commands and data packets to the ClearSCADA server that can cause the ClearSCADA server process and ClearSCADA communications driver processes to terminate. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "IMPROPER INPUT VALIDATION CWE-20",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-05-15T09:57:01.000Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "name": "96768",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96768"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-068-01"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "ics-cert@hq.dhs.gov",
          "DATE_PUBLIC": "2017-03-09T00:00:00",
          "ID": "CVE-2017-6021",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "ClearSCADA",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "2014 R1 (build 75.5210) and prior"
                          },
                          {
                            "version_value": "2014 R1.1 (build 75.5387) and prior"
                          },
                          {
                            "version_value": "2015 R1 (build 76.5648) and prior"
                          },
                          {
                            "version_value": "2015 R2 (build 77.5882) and prior"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Schneider Electric SE"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Schneider Electric ClearSCADA 2014 R1 (build 75.5210) and prior, 2014 R1.1 (build 75.5387) and prior, 2015 R1 (build 76.5648) and prior, and 2015 R2 (build 77.5882) and prior, an attacker with network access to the ClearSCADA server can send specially crafted sequences of commands and data packets to the ClearSCADA server that can cause the ClearSCADA server process and ClearSCADA communications driver processes to terminate. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "IMPROPER INPUT VALIDATION CWE-20"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "96768",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96768"
            },
            {
              "name": "https://ics-cert.us-cert.gov/advisories/ICSA-17-068-01",
              "refsource": "MISC",
              "url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-068-01"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2017-6021",
    "datePublished": "2018-05-14T14:00:00.000Z",
    "dateReserved": "2017-02-16T00:00:00.000Z",
    "dateUpdated": "2024-09-16T22:56:53.661Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CNVD-2017-03833

CVE-2017-6021 (GCVE-0-2017-6021)

Tags

Sightings

Nomenclature

Related by attack behaviour