Skip to main content

Vtscada CVE-2017-6045

HIGH
Exposure of Information Through Directory Listing (CWE-548)
2017-06-21 ics-cert@hq.dhs.gov
Information Disclosure Vtscada
7.5
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Jun 21, 2017 - 19:29 cve.org
HIGH 7.5

DescriptionCVE.org

An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed within the web server application to unauthenticated users. These files may contain sensitive configuration information.

AnalysisAI

An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-548. An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed within the web server application to unauthenticated users. These files may contain sensitive configuration information. Affected products include: Trihedral Vtscada. Version information: prior to 11.2.26..

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Vtscada

View all
CVE-2016-4532 CRITICAL
9.1 Jun 09

Directory traversal vulnerability in the WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.
CVE-2016-4510 CRITICAL
9.1 Jun 09

The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to bypass

CVE-2014-9192 HIGH
7.8 Dec 11

Integer overflow in Trihedral Engineering VTScada (formerly VTS) 6.5 through 9.x before 9.1.20, 10.x before 10.2.22, and
CVE-2017-14029 HIGH
7.8 Nov 06

An Uncontrolled Search Path Element issue was discovered in Trihedral VTScada 11.3.03 and prior. Rated high severity (CV
CVE-2017-14031 HIGH
7.8 Nov 06

An Improper Access Control issue was discovered in Trihedral VTScada 11.3.03 and prior. Rated high severity (CVSS 7.8),

CVE-2017-6043 HIGH
7.5 Jun 21

A Resource Consumption issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Rated high severity (CVSS 7.
CVE-2022-3181 HIGH
7.5 Nov 02

An Improper Input Validation vulnerability exists in Trihedral VTScada version 12.0.38 and prior. Rated high severity (C
CVE-2017-6053 MEDIUM
6.1 Jun 21

A Cross-Site Scripting issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Rated medium severity (CVSS

Same weakness CWE-548 – Exposure of Information Through Directory Listing

View all
CVE-2024-2340 MEDIUM POC
5.3
CVE-2025-28170 HIGH POC
7.6
CVE-2019-5415 HIGH POC
7.5
CVE-2025-2651 MEDIUM POC
6.9
CVE-2025-2038 MEDIUM POC
6.9
CVE-2025-2652 MEDIUM POC
6.9
CVE-2024-8711 MEDIUM POC
6.9
CVE-2024-7912 MEDIUM POC
6.9

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2017-6045 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy