Post #10 — ScadaX News (@ScadaXNews)

TGStat

Type to search

Advanced channel search

English

Site language

Russian English Uzbek
Sign In

Catalog

Channels and groups catalog Search for channels
Add a channel/group
Ratings

Rating of channels Rating of groups Posts rating
Ratings of brands and people
Analytics
Search by posts
Telegram monitoring

ScadaX News

24 Jul 2019, 16:51

Open in Telegram Share Report

UNQUOTED SEARCH PATH OR ELEMENT CWE-428
Some services have an unquoted service path. If an authenticated user is able to insert code in the system root path, that code can be executed during the application startup.

https://www.us-cert.gov/ics/advisories/icsa-19-199-01

Johnson Controls exacqVision Server | CISA

1. EXECUTIVE SUMMARY CVSS v3 6.7 Vendor: Exacq Technologies, Inc., a subsidiary of Johnson Controls Equipment: exacqVision Server Vulnerability: Unquoted Search Path or Element 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated user to elevate their ...

7 0 0