Vulnerability identifier: #VU6989

Vulnerability risk: Medium

CVSSv3.1: 8.1 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2017-7914

CWE-ID: CWE-284

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
PanelView Plus 6 700-1500
Hardware solutions / Routers & switches, VoIP, GSM, etc

Vendor: Rockwell Automation

Description
The vulnerability allows a remote attacker to gain access to the target system.

The weakness exists due to insufficient implementation of access control mechanisms. A remote attacker can access the device and obtain potentially sensitive data or cause the device to crash.

Successful exploitation of the vulnerability may result in information disclosure or denial of service.

Mitigation
Update version 7.00 to V7.00-20150209;
Update version 8.00 to V8.00-20160418;
Update version 8.10 to V8.10-20151026 or later;
Update version 8.20 to V8.20-20160308 or later;
Update version 9.00 to 9.00-20170328 or later.

Vulnerable software versions

PanelView Plus 6 700-1500: 6.00-20140306 - 8.00-20141023

---

External links
http://ics-cert.us-cert.gov/advisories/ICSA-17-157-01
http://rockwellautomation.custhelp.com/app/answers/detail/a_id/1047345/page/1

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.