{"id":1415,"date":"2017-06-29T15:03:40","date_gmt":"2017-06-29T07:03:40","guid":{"rendered":"http:\/\/w3c.weblink.com.tw\/si\/?p=1415"},"modified":"2017-06-29T15:03:40","modified_gmt":"2017-06-29T07:03:40","slug":"struxureware-dce-%e6%88%96-netbotz-%e7%94%a2%e5%93%81%e6%9c%83%e5%8f%97%e5%88%b0-stack-clash%e7%9a%84%e6%94%bb%e6%93%8a%e5%97%8e","status":"publish","type":"post","link":"https:\/\/w3c.weblink.com.tw\/si\/?p=1415","title":{"rendered":"StruxureWare DCE \u6216 NetBotz \u7522\u54c1\u6703\u53d7\u5230 Stack Clash\u7684\u653b\u64ca\u55ce?"},"content":{"rendered":"<p><font size=\"4\">A: <\/font> <\/p>\n<p><font size=\"4\">o NetBotz 4.X is not vulnerable to this issue because NetBotz doesn\u2019t use glibc and it also doesn\u2019t use a kernel that is vulnerable.<\/font> <\/p>\n<p><font size=\"4\">o StruxureWare DCE v7.X is \u201cvulnerable\u201d, as it would show in security scans. However, to exploit the vulnerability, an individual needs local system access and DCE does not provide local unprivileged user shell access. This means there is nothing to exploit. Since the Linux OS has affected packages installed that are part of the overall OS, security scanners may continue to alert on the presence of associated CVE IDs. The next release of DCE v7.X available later in 2017 will include the latest patched libraries. <\/font> <\/p>\n<p><font size=\"4\">Cyber Security is an important element of Schneider Electrics&#8217; commitment to software quality. Regular vulnerability assessment and further investigation is ongoing on other Schneider Electric platforms in addition to the above and will be detailed if discovered.<\/font><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A: o NetBotz 4.X is not vulnerable to this issue becaus [&hellip;]<\/p>\n","protected":false},"author":39,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[14],"tags":[],"class_list":["post-1415","post","type-post","status-publish","format-standard","hentry","category-faq-siapc"],"_links":{"self":[{"href":"https:\/\/w3c.weblink.com.tw\/si\/index.php?rest_route=\/wp\/v2\/posts\/1415","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/w3c.weblink.com.tw\/si\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/w3c.weblink.com.tw\/si\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/w3c.weblink.com.tw\/si\/index.php?rest_route=\/wp\/v2\/users\/39"}],"replies":[{"embeddable":true,"href":"https:\/\/w3c.weblink.com.tw\/si\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1415"}],"version-history":[{"count":1,"href":"https:\/\/w3c.weblink.com.tw\/si\/index.php?rest_route=\/wp\/v2\/posts\/1415\/revisions"}],"predecessor-version":[{"id":1416,"href":"https:\/\/w3c.weblink.com.tw\/si\/index.php?rest_route=\/wp\/v2\/posts\/1415\/revisions\/1416"}],"wp:attachment":[{"href":"https:\/\/w3c.weblink.com.tw\/si\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1415"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/w3c.weblink.com.tw\/si\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1415"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/w3c.weblink.com.tw\/si\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1415"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}