Null Pointer Dereference in Schneider Electric Wonderware ArchestrA Logger

CVE-2017-9631

Summary

A null pointer dereference vulnerability was identified in the Schneider Electric Wonderware ArchestrA Logger, allowing attackers to cause the logger process to crash. This results in a denial of service for logging and log-viewing, disrupting the functionality of applications relying on the logger service. While affected applications can continue to operate without the Wonderware ArchestrA Logger, the loss of log data can hinder troubleshooting and security monitoring efforts.

References