CVE-2017-14031 Privilege escalation in Trihedral Engineering Limited VTScada
A local non-administrator user can read and write to the file system, allowing privilege escalation and data modification in Trihedral VTScada.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-14031?
CVE-2017-14031 is a high-severity vulnerability in Trihedral Engineering Limited VTScada, published on 6 Nov 2017. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An Improper Access Control issue was discovered in Trihedral VTScada 11.3.03 and prior. A local, non-administrator user has privileges to read and write to the file system of the target machine.
Which versions are affected by CVE-2017-14031?
It affects 1 product.
Products include Trihedral Vtscada.
How do I fix CVE-2017-14031?
No fix has been published for CVE-2017-14031 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-14031 being exploited?
There is no known exploitation of CVE-2017-14031 in the wild and no public exploit code.
Other vulnerabilities in Trihedral Engineering Limited VTScada
Sources
Also known as GHSA-qw27-7q4v-mh55.