CVE-2018-10619
An unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3.90.00 and prior may allow an authorized, but non-privileged local user to execute arbitrary code and allow a threat actor to escalate user privileges on the affected workstation.
- Score
- CVSS 3.0 7.8 High
- Status
- Modified - ics-cert@hq.dhs.gov
- Published
- 2018-06-07
- Last modified
- 2024-09-16
- Weaknesses
- CWE-428
Affected products
- Rockwell Automation Rslinx Classic And Factorytalk Linx Gateway (Ics-cert)
- Factorytalk Linx Gateway (Rockwellautomation)
- Rslinx Classic (Rockwellautomation)
References
- http://www.securityfocus.com/bid/104415
- https://ics-cert.us-cert.gov/advisories/ICSA-18-158-01
- https://www.exploit-db.com/exploits/44892/
