CVE-2017-5165

Опубликовано: 13 фев. 2017

Источник: nvd

CVSS3: 7.6

CVSS2: 6.8

EPSS Низкий

Описание

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. There is no CSRF Token generated per page and/or per (sensitive) function. Successful exploitation of this vulnerability can allow silent execution of unauthorized actions on the device such as configuration parameter changes, and saving modified configuration.

Ссылки

http://www.securityfocus.com/bid/93028
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-031-01A
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/93028
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-031-01A
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:binom3:universal_multifunctional_electric_power_quality_meter_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:binom3:universal_multifunctional_electric_power_quality_meter:-:*:*:*:*:*:*:*

EPSS

Процентиль: 24%

0.00083

Низкий

7.6 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-cf82-f44g-3hmr