An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26.

Published 9 y ago 2017-06-21 · modified 4 mo ago 2026-06-17 · JSON

CVSS

7.5

v3.0 · NVD

CISA KEV

not known exploited

EPSS

1.7%

percentile 77%

Public exploits

none known

An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed within the web server application to unauthenticated users. These files may contain sensitive configuration information.

Exploit prediction (EPSS)

1.68% probability of exploitation in the next 30 days, higher than 77% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	7.5	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N`
NVD	2.0	5.0	`AV:N/AC:L/Au:N/C:P/I:N/A:N`

Affected products

n/a Trihedral VTScada

Classification

Weakness

CWE-548 Exposure of Information Through Directory Listing
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

ics-cert.us-cert.gov /advisories/ICSA-17-164-01 · x_refsource_MISC, x_transferred
securityfocus.com /bid/99066 · vdb-entry, x_refsource_BID, x_transferred

Sources

CVE List: CVE-2017-6045
NVD: CVE-2017-6045

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.