CVE-2017-7972 Command injection in Citect Anywhere
Attackers can escape remote SCADA applications to launch arbitrary processes, posing a significant risk to industrial control systems.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-7972?
CVE-2017-7972 is a medium-severity command injection vulnerability in Schneider Electric SE Citect Anywhere, published on 25 Sep 2017. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the ability to escape out of remote PowerSCADA Anywhere applications and launch other processes.
Which versions are affected by CVE-2017-7972?
It affects 2 products.
Products include Schneider-Electric Citect Anywhere, Schneider-Electric Powerscada Anywhere.
How do I fix CVE-2017-7972?
No fix has been published for CVE-2017-7972 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2017-7972 being exploited?
There is no known exploitation of CVE-2017-7972 in the wild and no public exploit code.
Other vulnerabilities in Schneider Electric SE Citect Anywhere
Sources
Also known as GHSA-jrq2-q27p-rp6q.