CVE-2018-1168
First published: Wed Feb 21 2018(Updated: )
This vulnerability allows local attackers to escalate privileges on vulnerable installations of ABB MicroSCADA 9.3 with FP 1-2-3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of the access controls for the installed product files. The installation procedure leaves critical files open to manipulation by any authenticated user. An attacker can leverage this vulnerability to escalate privileges to SYSTEM. Was ZDI-CAN-5097.
Credit: zdi-disclosures@trendmicro.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Hitachienergy Sys600 Firmware | =9.0 | |
| Hitachienergy Sys600 Firmware | =9.1 | |
| Hitachienergy Sys600 Firmware | =9.1.5 | |
| Hitachienergy Sys600 Firmware | =9.2 | |
| Hitachienergy Sys600 Firmware | =9.4 | |
| Hitachienergy Sys600 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-1168?
CVE-2018-1168 is a vulnerability that allows local attackers to escalate privileges on vulnerable installations of ABB MicroSCADA 9.3 with FP 1-2-3.
How severe is CVE-2018-1168?
CVE-2018-1168 has a severity score of 7.8 (high).
How can this vulnerability be exploited?
To exploit CVE-2018-1168, an attacker must first obtain the ability to execute low-privileged code on the target system.
What is the affected software?
The affected software for CVE-2018-1168 is Hitachienergy Sys600 Firmware versions 9.0, 9.1, 9.1.5, 9.2, and 9.4.
Is Hitachienergy Sys600 Firmware version 9.2 vulnerable?
Yes, Hitachienergy Sys600 Firmware version 9.2 is vulnerable to CVE-2018-1168.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/description
- agent/tags
- agent/softwarecombine
- agent/first-publish-date
- agent/event
- vendor/hitachienergy
- canonical/hitachienergy sys600 firmware
- version/hitachienergy sys600 firmware/9.0
- version/hitachienergy sys600 firmware/9.1
- version/hitachienergy sys600 firmware/9.1.5
- version/hitachienergy sys600 firmware/9.2
- version/hitachienergy sys600 firmware/9.4
- canonical/hitachienergy sys600