CVE-2018-10619: High severity rslinx classic vulnerability
An unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3.90.00 and prior may allow an authorized, but non-privileged local user to execute arbitrary code and allow a threat actor to escalate user privileges on the affected workstation.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-10619?
CVE-2018-10619 refers to an unquoted search path or element vulnerability in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3.90.00 and prior.
What is the severity of CVE-2018-10619?
CVE-2018-10619 has a severity rating of 7.8, which is considered high.
How can an unauthorized user exploit CVE-2018-10619?
CVE-2018-10619 can be exploited by an authorized, but non-privileged local user to execute arbitrary code and allow a threat actor to escalate user privileges on the affected workstation.
Which software versions are affected by CVE-2018-10619?
RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3.90.00 and prior are affected by CVE-2018-10619.
Are there any references available for CVE-2018-10619?
Yes, you can find references for CVE-2018-10619 at the following links: http://www.securityfocus.com/bid/104415, https://ics-cert.us-cert.gov/advisories/ICSA-18-158-01, https://www.exploit-db.com/exploits/44892/