CVE-2017-11165

2017-07-12T12:29:00
ID CVE-2017-11165
Type cve
Reporter cve@mitre.org
Modified 2017-08-15T19:27:00

Description

dataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credential and configuration information via a direct request for the /services/getFile.cmd?userfile=config.xml URI.