7.8
CVE-2017-9961
- EPSS 0.09%
- Veröffentlicht 26.09.2017 01:29:04
- Zuletzt bearbeitet 20.04.2025 01:37:25
- Quelle cybersecurity@se.com
- Teams Watchlist Login
- Unerledigt Login
A vulnerability exists in Schneider Electric's Pro-Face GP Pro EX version 4.07.000 that allows an attacker to execute arbitrary code. Malicious code installation requires an access to the computer. By placing a specific DLL/OCX file, an attacker is able to force the process to load arbitrary DLL and execute arbitrary code in the context of the process.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Schneider-electric ≫ Pro-face Gp Pro Ex Version4.07.000
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.09% | 0.232 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|