| ID | 51563 |
| Created | Jun 09, 2022 |
| Updated | Jul 05, 2022 |
| Severity |
|
| Coverage |
IPS (Regular DB)
IPS (Extended DB)
|
| Default Action | drop |
| Active |
|
| Affected OS | Windows, Linux |
| Affected App | SCADA |
Legend
| Active/Available |
|
| InActive/Not Available |
|
Update History
| Date | Version | Detail |
|---|---|---|
| 2022-07-12 | 21.354 | Default_action:pass:drop |
| 2022-06-21 | 21.342 | Modified |
| 2022-06-09 | 21.336 |
Refine Search
Threat Encyclopedia
Open.Automation.OAS.SecureTransferFiles.Arbitrary.File.Write
Description
This indicates an attack attempt to exploit an Arbitrary File Write Vulnerability in Open Automation Software platform.
This vulnerability is due to the SecureTransferFiles command allowing a non-privileged user to upload a file. An authenticated, remote user can exploit this vulnerability by sending crafted requests to the target platform. Successful exploitation could result in the writing of an arbitrary file, which may be used to facilitate the execution of arbitrary code.
Affected Products
Open Automation Software OAS Platform V16.00.0112
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://openautomationsoftware.com/downloads/
