CVE-2017-12699

An Incorrect Default Permissions issue was discovered in AzeoTech DAQFactory versions prior to 17.1. Local, non-administrative users may be able to replace or modify original application files with malicious ones.

Score

CVSS 3.0 7.1 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2017-09-09

Last modified

2024-08-05

Weaknesses

CWE-276

Affected products

• Daqfactory (Azeotech)

References

• http://www.securityfocus.com/bid/100522
• https://ics-cert.us-cert.gov/advisories/ICSA-17-241-01