Lucene search

IcscertCVE-2017-5162

HistoryFeb 13, 2017 - 9:59 p.m.

CVE-2017-5162

2017-02-1321:59:02

CWE-306

icscert

web.nvd.nist.gov

cve-2017-5162

binom3

electric power quality meter

authentication flaw

unauthorized access

configuration

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.011

Percentile

84.6%

JSON

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Lack of authentication for remote service gives access to application set up and configuration.

Affected configurations

Nvd

Node

binom3universal_multifunctional_electric_power_quality_meter_firmwareMatch-

AND

binom3universal_multifunctional_electric_power_quality_meterMatch-

VendorProductVersionCPE
binom3universal_multifunctional_electric_power_quality_meter_firmware-cpe:2.3:o:binom3:universal_multifunctional_electric_power_quality_meter_firmware:-:*:*:*:*:*:*:*
binom3universal_multifunctional_electric_power_quality_meter-cpe:2.3:h:binom3:universal_multifunctional_electric_power_quality_meter:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
binom3	universal_multifunctional_electric_power_quality_meter_firmware	-	cpe:2.3:o:binom3:universal_multifunctional_electric_power_quality_meter_firmware:-:::::::*
binom3	universal_multifunctional_electric_power_quality_meter	-	cpe:2.3:h:binom3:universal_multifunctional_electric_power_quality_meter:-:::::::*

CNA Affected

[
  {
    "product": "BINOM3 Electric Power Quality Meter",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "BINOM3 Electric Power Quality Meter"
      }
    ]
  }
]

References

www.securityfocus.com/bid/93028

ics-cert.us-cert.gov/advisories/ICSA-17-031-01A

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.011

Percentile

84.6%

JSON

Related for CVE-2017-5162