Details of VAR-201805-0119

ID

VAR-201805-0119

CVE

CVE-2017-6015

TITLE

Rockwell Automation FactoryTalk Activation Local Privilege Escalation Vulnerability

Trust: 0.8

sources: IVD: 5f92208a-6f8a-474a-bd93-87af91db32ec // CNVD: CNVD-2017-05069

DESCRIPTION

Without quotation marks, any whitespace in the file path for Rockwell Automation FactoryTalk Activation version 4.00.02 remains ambiguous, which may allow an attacker to link to or run a malicious executable. This may allow an authorized, but not privileged local user to execute arbitrary code with elevated privileges on the system. CVSS v3 base score: 8.8, CVSS vector string: (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). Rockwell Automation has released a new version of FactoryTalk Activation, Version 4.01, which addresses the identified vulnerability. Rockwell Automation recommends upgrading to the latest version of FactoryTalk Activation, Version 4.01 or later. Rockwell Automation FactoryTalk Activation Contains vulnerabilities related to authorization, permissions, and access control.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Rockwell Automation is a solution provider for industrial automation, control and information technology. A local privilege elevation vulnerability exists in RockwellAutomationFactoryTalkActivation. FactoryTalk Activation Service 4.00.02 and prior are vulnerable. FactoryTalk Activation is one component used to manage application licenses

Trust: 2.7

sources: NVD: CVE-2017-6015 // JVNDB: JVNDB-2017-013404 // CNVD: CNVD-2017-05069 // BID: 96996 // IVD: 5f92208a-6f8a-474a-bd93-87af91db32ec // VULHUB: VHN-114218

IOT TAXONOMY

category:	['ICS', 'Network device']	sub_category:	-	Trust: 0.6
category:	['ICS']	sub_category:	-	Trust: 0.2

sources: IVD: 5f92208a-6f8a-474a-bd93-87af91db32ec // CNVD: CNVD-2017-05069

AFFECTED PRODUCTS

vendor:	rockwellautomation	model:	factorytalk activation	scope:	lte	version:	4.00.02	Trust: 1.0
vendor:	rockwell	model:	automation factorytalk activation service	scope:	eq	version:	4.00.02	Trust: 0.9
vendor:	rockwell automation	model:	factorytalk	scope:	eq	version:	4.00.02	Trust: 0.8
vendor:	rockwell	model:	automation factorytalk activation service	scope:	lt	version:	4.00.02	Trust: 0.6
vendor:	rockwellautomation	model:	factorytalk activation	scope:	eq	version:	4.00.02	Trust: 0.6
vendor:	rockwell	model:	automation studio view designer	scope:	eq	version:	50000	Trust: 0.3
vendor:	rockwell	model:	automation studio logix emulate	scope:	eq	version:	50000	Trust: 0.3
vendor:	rockwell	model:	automation studio logix designer	scope:	eq	version:	50000	Trust: 0.3
vendor:	rockwell	model:	automation studio architect	scope:	eq	version:	50000	Trust: 0.3
vendor:	rockwell	model:	automation softlogix	scope:	eq	version:	58000	Trust: 0.3
vendor:	rockwell	model:	automation rsview32	scope:	eq	version:	0	Trust: 0.3
vendor:	rockwell	model:	automation rsnetworx	scope:	eq	version:	0	Trust: 0.3
vendor:	rockwell	model:	automation rslogix emulate	scope:	eq	version:	50000	Trust: 0.3
vendor:	rockwell	model:	automation rslogix	scope:	eq	version:	50000	Trust: 0.3
vendor:	rockwell	model:	automation rslogix	scope:	eq	version:	5000	Trust: 0.3
vendor:	rockwell	model:	automation rslogix	scope:	eq	version:	50	Trust: 0.3
vendor:	rockwell	model:	automation rslinx classic	scope:	eq	version:	0	Trust: 0.3
vendor:	rockwell	model:	automation rsfieldbus	scope:	eq	version:	0	Trust: 0.3
vendor:	rockwell	model:	automation rockarena	scope:	eq	version:	0	Trust: 0.3
vendor:	rockwell	model:	automation factorytalk viewpoint	scope:	eq	version:	0	Trust: 0.3
vendor:	rockwell	model:	automation factorytalk view site edition	scope:	eq	version:	0	Trust: 0.3
vendor:	rockwell	model:	automation factorytalk view machine edition	scope:	eq	version:	0	Trust: 0.3
vendor:	rockwell	model:	automation factorytalk vantagepoint	scope:	eq	version:	0	Trust: 0.3
vendor:	rockwell	model:	automation factorytalk metrics	scope:	eq	version:	0	Trust: 0.3
vendor:	rockwell	model:	automation factorytalk information server	scope:	eq	version:	0	Trust: 0.3
vendor:	rockwell	model:	automation factorytalk historian site edition	scope:	eq	version:	0	Trust: 0.3
vendor:	rockwell	model:	automation factorytalk historian classic	scope:	eq	version:	0	Trust: 0.3
vendor:	rockwell	model:	automation factorytalk gateway	scope:	eq	version:	0	Trust: 0.3
vendor:	rockwell	model:	automation factorytalk eprocedure	scope:	eq	version:	0	Trust: 0.3
vendor:	rockwell	model:	automation factorytalk energymetrix	scope:	eq	version:	0	Trust: 0.3
vendor:	rockwell	model:	automation factorytalk batch	scope:	eq	version:	0	Trust: 0.3
vendor:	rockwell	model:	automation factorytalk assetcentre	scope:	eq	version:	0	Trust: 0.3
vendor:	rockwell	model:	automation emonitor	scope:	eq	version:	0	Trust: 0.3
vendor:	rockwell	model:	automation factorytalk activation service	scope:	ne	version:	4.01	Trust: 0.3
vendor:	factorytalk activation	model:	-	scope:	eq	version:	*	Trust: 0.2

sources: IVD: 5f92208a-6f8a-474a-bd93-87af91db32ec // CNVD: CNVD-2017-05069 // BID: 96996 // JVNDB: JVNDB-2017-013404 // CNNVD: CNNVD-201702-597 // NVD: CVE-2017-6015

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2017-6015
value:	HIGH
Trust: 1.0
NVD:	CVE-2017-6015
value:	HIGH
Trust: 0.8
CNVD:	CNVD-2017-05069
value:	LOW
Trust: 0.6
CNNVD:	CNNVD-201702-597
value:	HIGH
Trust: 0.6
IVD:	5f92208a-6f8a-474a-bd93-87af91db32ec
value:	HIGH
Trust: 0.2
VULHUB:	VHN-114218
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2017-6015
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2017-05069
severity:	LOW
baseScore:	3.3
vectorString:	AV:L/AC:M/AU:N/C:P/I:P/A:N
accessVector:	LOCAL
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	3.4
impactScore:	4.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
IVD:	5f92208a-6f8a-474a-bd93-87af91db32ec
severity:	LOW
baseScore:	3.3
vectorString:	AV:L/AC:M/AU:N/C:P/I:P/A:N
accessVector:	LOCAL
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	3.4
impactScore:	4.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2
VULHUB:	VHN-114218
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2017-6015
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.0
Trust: 1.8

sources: IVD: 5f92208a-6f8a-474a-bd93-87af91db32ec // CNVD: CNVD-2017-05069 // VULHUB: VHN-114218 // JVNDB: JVNDB-2017-013404 // CNNVD: CNNVD-201702-597 // NVD: CVE-2017-6015

PROBLEMTYPE DATA

problemtype:	CWE-74	Trust: 1.1
problemtype:	CWE-428	Trust: 1.0
problemtype:	CWE-264	Trust: 0.9

sources: VULHUB: VHN-114218 // JVNDB: JVNDB-2017-013404 // NVD: CVE-2017-6015

THREAT TYPE

local

Trust: 0.9

sources: BID: 96996 // CNNVD: CNNVD-201702-597

TYPE

injection

Trust: 0.8

sources: IVD: 5f92208a-6f8a-474a-bd93-87af91db32ec // CNNVD: CNNVD-201702-597

CONFIGURATIONS

sources: JVNDB: JVNDB-2017-013404

PATCH

title:	Top Page	url:	https://www.rockwellautomation.com/	Trust: 0.8
title:	RockwellAutomationFactoryTalkActivation Local Privilege Escalation Vulnerability Patch	url:	https://www.cnvd.org.cn/patchInfo/show/92373	Trust: 0.6
title:	Rockwell Automation FactoryTalk Activation Security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=99649	Trust: 0.6

sources: CNVD: CNVD-2017-05069 // JVNDB: JVNDB-2017-013404 // CNNVD: CNNVD-201702-597

EXTERNAL IDS

db:	NVD	id:	CVE-2017-6015	Trust: 3.6
db:	ICS CERT	id:	ICSA-17-047-02	Trust: 2.8
db:	BID	id:	96996	Trust: 2.6
db:	CNNVD	id:	CNNVD-201702-597	Trust: 0.9
db:	CNVD	id:	CNVD-2017-05069	Trust: 0.8
db:	JVNDB	id:	JVNDB-2017-013404	Trust: 0.8
db:	IVD	id:	5F92208A-6F8A-474A-BD93-87AF91DB32EC	Trust: 0.2
db:	VULHUB	id:	VHN-114218	Trust: 0.1

sources: IVD: 5f92208a-6f8a-474a-bd93-87af91db32ec // CNVD: CNVD-2017-05069 // VULHUB: VHN-114218 // BID: 96996 // JVNDB: JVNDB-2017-013404 // CNNVD: CNNVD-201702-597 // NVD: CVE-2017-6015

REFERENCES

url:	https://ics-cert.us-cert.gov/advisories/icsa-17-047-02	Trust: 2.5
url:	http://www.securityfocus.com/bid/96996	Trust: 2.3
url:	https://rockwellautomation.custhelp.com/app/answers/detail/a_id/939382	Trust: 1.7
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-6015	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2017-6015	Trust: 0.8
url:	http://www.rockwellautomation.com/	Trust: 0.3
url:	https://ics-cert.us-cert.gov/advisories/icsa-17-047-02	Trust: 0.3

sources: CNVD: CNVD-2017-05069 // VULHUB: VHN-114218 // BID: 96996 // JVNDB: JVNDB-2017-013404 // CNNVD: CNNVD-201702-597 // NVD: CVE-2017-6015

CREDITS

The vendor reported this issue.

Trust: 0.3

sources: BID: 96996

SOURCES

db:	IVD	id:	5f92208a-6f8a-474a-bd93-87af91db32ec
db:	CNVD	id:	CNVD-2017-05069
db:	VULHUB	id:	VHN-114218
db:	BID	id:	96996
db:	JVNDB	id:	JVNDB-2017-013404
db:	CNNVD	id:	CNNVD-201702-597
db:	NVD	id:	CVE-2017-6015

LAST UPDATE DATE

2024-11-23T23:05:07.707000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2017-05069	date:	2017-04-22T00:00:00
db:	VULHUB	id:	VHN-114218	date:	2019-10-09T00:00:00
db:	BID	id:	96996	date:	2017-03-23T00:01:00
db:	JVNDB	id:	JVNDB-2017-013404	date:	2018-07-04T00:00:00
db:	CNNVD	id:	CNNVD-201702-597	date:	2019-10-17T00:00:00
db:	NVD	id:	CVE-2017-6015	date:	2024-11-21T03:28:54.360

SOURCES RELEASE DATE

db:	IVD	id:	5f92208a-6f8a-474a-bd93-87af91db32ec	date:	2017-04-22T00:00:00
db:	CNVD	id:	CNVD-2017-05069	date:	2017-04-24T00:00:00
db:	VULHUB	id:	VHN-114218	date:	2018-05-11T00:00:00
db:	BID	id:	96996	date:	2017-03-21T00:00:00
db:	JVNDB	id:	JVNDB-2017-013404	date:	2018-07-04T00:00:00
db:	CNNVD	id:	CNNVD-201702-597	date:	2017-02-17T00:00:00
db:	NVD	id:	CVE-2017-6015	date:	2018-05-11T13:29:00.297