VAR-201209-0244
Vulnerability from variot - Updated: 2023-12-18 13:49Multiple untrusted search path vulnerabilities in RealFlex RealWin before 2.1.13, FlexView before 3.1.86, and RealWinDemo before 2.1.13 allow local users to gain privileges via a Trojan horse (1) realwin.dll or (2) keyhook.dll file in the current working directory. plural RealFlex There is a vulnerability in the product that can be obtained because the processing related to the search path is incomplete. Supplementary information : CWE Vulnerability type by CWE-426: Untrusted Search Path ( Unreliable search path ) Has been identified. (1) realwin.dll Or (2) keyhook.dll It may be possible to get permission through the file. RealWin is a data acquisition and monitoring control system (SCADA) server product running on the Windows platform. FlexView is a human interface product for Eston Automation. Multiple RealFlex products are not installed in the library file, and an attacker can build a malicious DLL file, store it in a remote WebDAV or SMB share, entice the application to parse, and execute arbitrary code in the application context. Multiple RealFlex products are prone to an insecure library loading vulnerability
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201209-0244",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "realwin",
"scope": "eq",
"trust": 1.6,
"vendor": "realflex",
"version": "1.06"
},
{
"model": "realwin",
"scope": "eq",
"trust": 1.6,
"vendor": "realflex",
"version": "2.1"
},
{
"model": "realwin",
"scope": "eq",
"trust": 1.6,
"vendor": "realflex",
"version": "2.0"
},
{
"model": "realwin",
"scope": "lte",
"trust": 1.0,
"vendor": "realflex",
"version": "2.1.12"
},
{
"model": "flexview",
"scope": "lte",
"trust": 1.0,
"vendor": "realflex",
"version": "3.1.85"
},
{
"model": "realwindemo",
"scope": "lte",
"trust": 1.0,
"vendor": "realflex",
"version": "2.1.12"
},
{
"model": "flexview",
"scope": "lt",
"trust": 0.8,
"vendor": "realflex",
"version": "3.1.86"
},
{
"model": "realwin",
"scope": "lt",
"trust": 0.8,
"vendor": "realflex",
"version": "2.1.13"
},
{
"model": "realwindemo",
"scope": "lt",
"trust": 0.8,
"vendor": "realflex",
"version": "2.1.13"
},
{
"model": "realwindemo",
"scope": "lte",
"trust": 0.6,
"vendor": "realflex",
"version": "\u003c=2.1.12"
},
{
"model": "realwin",
"scope": "lte",
"trust": 0.6,
"vendor": "realflex",
"version": "\u003c=2.1.12"
},
{
"model": "flexview",
"scope": "lte",
"trust": 0.6,
"vendor": "realflex",
"version": "\u003c=3.1.85"
},
{
"model": "realwindemo",
"scope": "eq",
"trust": 0.6,
"vendor": "realflex",
"version": "2.1.12"
},
{
"model": "realwin",
"scope": "eq",
"trust": 0.6,
"vendor": "realflex",
"version": "2.1.12"
},
{
"model": "flexview",
"scope": "eq",
"trust": 0.6,
"vendor": "realflex",
"version": "3.1.85"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "realwin",
"version": "1.06"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "realwin",
"version": "2.0"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "realwin",
"version": "2.1"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "realwin",
"version": "*"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "flexview",
"version": "*"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "realwindemo",
"version": "*"
}
],
"sources": [
{
"db": "IVD",
"id": "63c9cf40-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2012-5010"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-004246"
},
{
"db": "NVD",
"id": "CVE-2012-3004"
},
{
"db": "CNNVD",
"id": "CNNVD-201209-148"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:realflex:realwin:2.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:realflex:realwin:1.06:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:realflex:realwin:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "2.1.12",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:realflex:realwin:2.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:realflex:flexview:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "3.1.85",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:realflex:realwindemo:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "2.1.12",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2012-3004"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Carlos Mario Penagos Hollmann",
"sources": [
{
"db": "BID",
"id": "55464"
}
],
"trust": 0.3
},
"cve": "CVE-2012-3004",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.4,
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Medium",
"accessVector": "Local",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Complete",
"baseScore": 6.9,
"confidentialityImpact": "Complete",
"exploitabilityScore": null,
"id": "CVE-2012-3004",
"impactScore": null,
"integrityImpact": "Complete",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 6.9,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.4,
"id": "63c9cf40-2353-11e6-abef-000c29c66e3d",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.9 [IVD]"
}
],
"cvssV3": [],
"severity": [
{
"author": "NVD",
"id": "CVE-2012-3004",
"trust": 1.8,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201209-148",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "IVD",
"id": "63c9cf40-2353-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "63c9cf40-2353-11e6-abef-000c29c66e3d"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-004246"
},
{
"db": "NVD",
"id": "CVE-2012-3004"
},
{
"db": "CNNVD",
"id": "CNNVD-201209-148"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Multiple untrusted search path vulnerabilities in RealFlex RealWin before 2.1.13, FlexView before 3.1.86, and RealWinDemo before 2.1.13 allow local users to gain privileges via a Trojan horse (1) realwin.dll or (2) keyhook.dll file in the current working directory. plural RealFlex There is a vulnerability in the product that can be obtained because the processing related to the search path is incomplete. Supplementary information : CWE Vulnerability type by CWE-426: Untrusted Search Path ( Unreliable search path ) Has been identified. (1) realwin.dll Or (2) keyhook.dll It may be possible to get permission through the file. RealWin is a data acquisition and monitoring control system (SCADA) server product running on the Windows platform. FlexView is a human interface product for Eston Automation. Multiple RealFlex products are not installed in the library file, and an attacker can build a malicious DLL file, store it in a remote WebDAV or SMB share, entice the application to parse, and execute arbitrary code in the application context. Multiple RealFlex products are prone to an insecure library loading vulnerability",
"sources": [
{
"db": "NVD",
"id": "CVE-2012-3004"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-004246"
},
{
"db": "CNVD",
"id": "CNVD-2012-5010"
},
{
"db": "BID",
"id": "55464"
},
{
"db": "IVD",
"id": "63c9cf40-2353-11e6-abef-000c29c66e3d"
}
],
"trust": 2.61
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2012-3004",
"trust": 3.5
},
{
"db": "ICS CERT",
"id": "ICSA-12-251-01",
"trust": 3.3
},
{
"db": "CNVD",
"id": "CNVD-2012-5010",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201209-148",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2012-004246",
"trust": 0.8
},
{
"db": "BID",
"id": "55464",
"trust": 0.3
},
{
"db": "IVD",
"id": "63C9CF40-2353-11E6-ABEF-000C29C66E3D",
"trust": 0.2
}
],
"sources": [
{
"db": "IVD",
"id": "63c9cf40-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2012-5010"
},
{
"db": "BID",
"id": "55464"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-004246"
},
{
"db": "NVD",
"id": "CVE-2012-3004"
},
{
"db": "CNNVD",
"id": "CNNVD-201209-148"
}
]
},
"id": "VAR-201209-0244",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "63c9cf40-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2012-5010"
}
],
"trust": 1.2319444400000001
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "63c9cf40-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2012-5010"
}
]
},
"last_update_date": "2023-12-18T13:49:08.650000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "http://www.realflex.com/"
},
{
"title": "Multiple RealFlex product insecure libraries load patches for arbitrary code execution vulnerabilities",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchinfo/show/21891"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2012-5010"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-004246"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
},
{
"problemtype": "CWE-Other",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2012-004246"
},
{
"db": "NVD",
"id": "CVE-2012-3004"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.3,
"url": "http://www.us-cert.gov/control_systems/pdf/icsa-12-251-01.pdf"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-3004"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-3004"
},
{
"trust": 0.3,
"url": "http://realflex.com/products/"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2012-5010"
},
{
"db": "BID",
"id": "55464"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-004246"
},
{
"db": "NVD",
"id": "CVE-2012-3004"
},
{
"db": "CNNVD",
"id": "CNNVD-201209-148"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "63c9cf40-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2012-5010"
},
{
"db": "BID",
"id": "55464"
},
{
"db": "JVNDB",
"id": "JVNDB-2012-004246"
},
{
"db": "NVD",
"id": "CVE-2012-3004"
},
{
"db": "CNNVD",
"id": "CNNVD-201209-148"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2012-09-11T00:00:00",
"db": "IVD",
"id": "63c9cf40-2353-11e6-abef-000c29c66e3d"
},
{
"date": "2012-09-11T00:00:00",
"db": "CNVD",
"id": "CNVD-2012-5010"
},
{
"date": "2012-09-07T00:00:00",
"db": "BID",
"id": "55464"
},
{
"date": "2012-09-12T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2012-004246"
},
{
"date": "2012-09-08T10:28:20.510000",
"db": "NVD",
"id": "CVE-2012-3004"
},
{
"date": "2012-09-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201209-148"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2012-09-11T00:00:00",
"db": "CNVD",
"id": "CNVD-2012-5010"
},
{
"date": "2012-09-07T00:00:00",
"db": "BID",
"id": "55464"
},
{
"date": "2012-09-12T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2012-004246"
},
{
"date": "2012-09-10T04:00:00",
"db": "NVD",
"id": "CVE-2012-3004"
},
{
"date": "2012-09-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201209-148"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "BID",
"id": "55464"
},
{
"db": "CNNVD",
"id": "CNNVD-201209-148"
}
],
"trust": 0.9
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural RealFlex Vulnerability gained in products",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2012-004246"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "IVD",
"id": "63c9cf40-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNNVD",
"id": "CNNVD-201209-148"
}
],
"trust": 0.8
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…