CVE-2015-7912

The Ice Faces servlet in ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows remote attackers to upload and execute arbitrary Java code via a crafted XML document.

Score

CVSS 2.0 10.0 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2015-11-21

Last modified

2024-08-06

Affected products

• Aggregate (Tibbo)

References

• http://zerodayinitiative.com/advisories/ZDI-15-571/
• https://ics-cert.us-cert.gov/advisories/ICSA-15-323-01