{"id":"CVE-2017-9627","aliases":["EUVD-2017-18558","GHSA-q2pr-gqr4-26f4"],"status":"published","title":"An Uncontrolled Resource Consumption issue was discovered in Schneider Electric Wonderware...","description":"An Uncontrolled Resource Consumption issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The uncontrolled resource consumption vulnerability could allow an attacker to exhaust the memory resources of the machine, causing a denial of service.","severity":{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04125,"percentile":0.90877,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-400"],"published":"2017-07-07T17:00:00Z","modified":"2026-06-17T01:28:36Z","exploits":[{"source":"pocgithub","id":"USSCltd/aaLogger","title":"USSCltd/aaLogger","date":"2021-04-08","url":"https://github.com/USSCltd/aaLogger"}],"products":[{"vendor":"schneider-electric","product":"wonderware_archestra_logger"}],"references":[{"url":"http://www.securityfocus.com/bid/99488","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-17-187-04","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000116/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1038836","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9627"},{"url":"http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000116"},{"url":"https://github.com/advisories/GHSA-q2pr-gqr4-26f4"}],"sources":{"cve":[{"id":"CVE-2017-9627","description":"An Uncontrolled Resource Consumption issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The uncontrolled resource consumption vulnerability could allow an attacker to exhaust the memory resources of the machine, causing a denial of service.","status":"published","published":"2017-07-07T17:00:00Z","modified":"2024-08-05T17:11:02.37Z","cwes":["CWE-400"],"updated_at":"2026-11-02T14:33:13.606903Z"}],"euvd":[{"id":"EUVD-2017-18558","description":"An Uncontrolled Resource Consumption issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The uncontrolled resource consumption vulnerability could allow an attacker to exhaust the memory resources of the machine, causing a denial of service.","status":"published","published":"2017-07-07T17:00:00Z","modified":"2024-08-05T17:11:02Z","updated_at":"2026-11-03T02:23:27.257081Z"}],"ghsa":[{"id":"GHSA-q2pr-gqr4-26f4","title":"An Uncontrolled Resource Consumption issue was discovered in Schneider Electric Wonderware...","description":"An Uncontrolled Resource Consumption issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The uncontrolled resource consumption vulnerability could allow an attacker to exhaust the memory resources of the machine, causing a denial of service.","status":"published","published":"2022-05-13T01:09:36Z","modified":"2025-04-20T03:41:32Z","cvss":[{"version":"3.0","score":8.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:01:49.006624Z"}],"nvd":[{"id":"CVE-2017-9627","description":"An Uncontrolled Resource Consumption issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The uncontrolled resource consumption vulnerability could allow an attacker to exhaust the memory resources of the machine, causing a denial of service.","status":"published","published":"2017-07-07T17:29:00.37Z","modified":"2026-06-17T01:28:36.65Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:03:54.012105Z"}]}}