csaf_opcfoundation:opc-2017-11672

{
  "document": {
    "category": "opc_security_advisory",
    "csaf_version": "2.0",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The information provided in this disclosure is provided 'as is' without warranty of any kind. OPC Foundation disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall OPC Foundation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if OPC Foundation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply"
      }
    ],
    "publisher": {
      "category": "vendor",
      "name": "OPC Foundation",
      "namespace": "https://opcfoundation.org/security/csaf"
    },
    "references": [
      {
        "summary": "MITRE CVE entry",
        "url": "https://www.cve.org/CVERecord?id=CVE-2017-11672"
      },
      {
        "summary": "OPC LDS Download and Info",
        "url": "https://opcfoundation.org/developer-tools/developer-kits-unified-architecture/local-discovery-server-lds/"
      }
    ],
    "title": "Security Update for Local Discovery Services (LDS)",
    "tracking": {
      "current_release_date": "2017-07-28T00:00:00Z",
      "id": "OPC-2017-11672",
      "initial_release_date": "2017-07-28T00:00:00Z",
      "revision_history": [
        {
          "date": "2017-07-28T00:00:00Z",
          "number": "1.0.0",
          "summary": "Bulletin published"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "product_name",
        "name": "OPC UA Local Discovery Server 1.02.335.1",
        "product": {
          "name": "LDS.02.335.1",
          "product_id": "CSAFPID-01"
        }
      },
      {
        "category": "product_name",
        "name": "OPC UA Local Discovery Server 1.03.348",
        "product": {
          "name": "LDS.1.03.348",
          "product_id": "CSAFPID-02"
        }
      },
      {
        "category": "product_name",
        "name": "OPC UA Local Discovery Server 1.03.355",
        "product": {
          "name": "LDS-1.03.355",
          "product_id": "CSAFPID-03"
        }
      },
      {
        "category": "product_name",
        "name": "OPC UA Local Discovery Server 1.03.362",
        "product": {
          "name": "LDS-1.03.362",
          "product_id": "CSAFPID-04"
        }
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Members of the OPC community"
          ],
          "organization": "OPC Foundation",
          "summary": "Recognition for reporting the vulnerability."
        }
      ],
      "cve": "CVE-2017-11672",
      "discovery_date": "2017-07-28T00:00:00Z",
      "ids": [
        {
          "system_name": "GCVE",
          "text": "GCVE-105-2017-12069"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Local Discovery Server (LDS) is installed with an unquoted service path. This could allow the execution of unauthorized executables on the target machine.",
          "title": "Vulnerability Description"
        }
      ],
      "references": [
        {
          "summary": "PDF version",
          "url": "https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2017-11672.pdf"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-07-28T00:00:00Z",
          "details": "Update LDS to version 1.03.367 or later.",
          "product_ids": [
            "CSAFPID-01",
            "CSAFPID-02",
            "CSAFPID-03",
            "CSAFPID-04"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:F/RL:O/RC:C/CR:L/IR:M/AR:M/MAV:L/MAC:L/MPR:H/MUI:N/MS:U/MC:N/MI:N/MA:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-01",
            "CSAFPID-02",
            "CSAFPID-03",
            "CSAFPID-04"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Execution of unauthorized executables",
          "product_ids": [
            "CSAFPID-01",
            "CSAFPID-02",
            "CSAFPID-03",
            "CSAFPID-04"
          ]
        }
      ],
      "title": "Unquoted Service Path in LDS Allows Unauthorized Executable Execution"
    }
  ]
}