High severity7.8NVD Advisory· Published May 19, 2017· Updated May 13, 2026
CVE-2017-7968
CVE-2017-7968
Description
An Incorrect Default Permissions issue was discovered in Schneider Electric Wonderware InduSoft Web Studio v8.0 Patch 3 and prior versions. Upon installation, Wonderware InduSoft Web Studio creates a new directory and two files, which are placed in the system's path and can be manipulated by non-administrators. This could allow an authenticated user to escalate his or her privileges.
Affected products
1- cpe:2.3:a:schneider-electric:wonderware_indusoft_web_studio:*:*:*:*:*:*:*:*Range: <=8.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- download.schneider-electric.com/filesnvdVendor Advisory
- www.securityfocus.com/bid/98544nvdThird Party AdvisoryVDB Entry
- ics-cert.us-cert.gov/advisories/ICSA-17-138-02nvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.