CVE-2018-1168: High severity hitachi energy sys600 firmware vulnerability
This vulnerability allows local attackers to escalate privileges on vulnerable installations of ABB MicroSCADA 9.3 with FP 1-2-3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of the access controls for the installed product files. The installation procedure leaves critical files open to manipulation by any authenticated user. An attacker can leverage this vulnerability to escalate privileges to SYSTEM. Was ZDI-CAN-5097.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-1168?
CVE-2018-1168 is a vulnerability that allows local attackers to escalate privileges on vulnerable installations of ABB MicroSCADA 9.3 with FP 1-2-3.
How severe is CVE-2018-1168?
CVE-2018-1168 has a severity score of 7.8 (high).
How can this vulnerability be exploited?
To exploit CVE-2018-1168, an attacker must first obtain the ability to execute low-privileged code on the target system.
What is the affected software?
The affected software for CVE-2018-1168 is Hitachienergy Sys600 Firmware versions 9.0, 9.1, 9.1.5, 9.2, and 9.4.
Is Hitachienergy Sys600 Firmware version 9.2 vulnerable?
Yes, Hitachienergy Sys600 Firmware version 9.2 is vulnerable to CVE-2018-1168.