CVE-2017-5176
Published May 19, 2017
Last updated 5 years ago
Overview
- Description
- A DLL Hijack issue was discovered in Rockwell Automation Connected Components Workbench (CCW). The following versions are affected: Connected Components Workbench - Developer Edition, v9.01.00 and earlier: 9328-CCWDEVENE, 9328-CCWDEVZHE, 9328-CCWDEVFRE, 9328-CCWDEVITE, 9328-CCWDEVDEE, 9328-CCWDEVESE, and 9328-CCWDEVPTE; and Connected Components Workbench - Free Standard Edition (All Supported Languages), v9.01.00 and earlier. Certain DLLs included with versions of CCW software can be potentially hijacked to allow an attacker to gain rights to a victim's affected personal computer. Such access rights can be at the same or potentially higher level of privileges as the compromised user account, including and up to computer administrator privileges.
- Source
- ics-cert@hq.dhs.gov
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 7
- Impact score
- 5.9
- Exploitability score
- 1
- Vector string
- CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- Severity
- HIGH
CVSS 2.0
- Type
- Primary
- Base score
- 6.2
- Impact score
- 10
- Exploitability score
- 1.9
- Vector string
- AV:L/AC:H/Au:N/C:C/I:C/A:C
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:rockwellautomation:connected_components_workbench:*:*:*:*:developer:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D30E0FF5-DFC8-4A9E-AC5E-A989607E2419",
"versionEndIncluding": "9.01.00"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:rockwellautomation:9328-ccwdevdee:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "669BA851-4DD0-498B-8775-4C9529CAF06C"
},
{
"criteria": "cpe:2.3:h:rockwellautomation:9328-ccwdevene:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "589025A2-B3B1-4FFC-A6F2-9D6E3A976E3E"
},
{
"criteria": "cpe:2.3:h:rockwellautomation:9328-ccwdevese:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "49295F0C-B90A-46BF-AC22-723743237A3D"
},
{
"criteria": "cpe:2.3:h:rockwellautomation:9328-ccwdevfre:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5B41A881-8DAA-43E3-934E-4500C8815666"
},
{
"criteria": "cpe:2.3:h:rockwellautomation:9328-ccwdevite:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3D2366F9-803F-433A-8712-1E328D03FFAF"
},
{
"criteria": "cpe:2.3:h:rockwellautomation:9328-ccwdevpte:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "68B1539D-19C2-4048-8904-C0B6D60E34D6"
},
{
"criteria": "cpe:2.3:h:rockwellautomation:9328-ccwdevzhe:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C5654863-5B85-4EE3-96A2-8624407BD9FC"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:rockwellautomation:connected_components_workbench:*:*:*:*:free_standard:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5AE5B4DF-E10A-42DB-B9F3-E9D292281235",
"versionEndIncluding": "9.01.00"
}
],
"operator": "OR"
}
]
}
]