Lucene search

[email protected]CVE-2017-9626

HistoryMar 27, 2019 - 8:29 p.m.

CVE-2017-9626

2019-03-2720:29:03

CWE-284

CWE-732

[email protected]

web.nvd.nist.gov

marel

food processing

systems

pluto

remote access

vulnerability

ssh authentication

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.6%

JSON

Systems using the Marel Food Processing Systems Pluto platform do not restrict remote access. Marel has created an update for Pluto-based applications. This update will restrict remote access by implementing SSH authentication.

Affected configurations

NVD

Node

marelpluto1203Match1.0

marelpluto2Match1.0.0

CPENameOperatorVersion
marel:pluto1203marel pluto1203eq1.0
marel:pluto2marel pluto2eq1.0.0

CPE	Name	Operator	Version
marel:pluto1203	marel pluto1203	eq	1.0
marel:pluto2	marel pluto2	eq	1.0.0

CNA Affected

[
  {
    "product": "Marel Food Processing Systems Pluto platform",
    "vendor": "Marel",
    "versions": [
      {
        "status": "affected",
        "version": "Graders using Pluto platform"
      },
      {
        "status": "affected",
        "version": "Portioning Machines using Pluto platform"
      },
      {
        "status": "affected",
        "version": "Flowline systems using Pluto platform"
      },
      {
        "status": "affected",
        "version": "Packing systems using Pluto platform"
      },
      {
        "status": "affected",
        "version": "SensorX machines using Pluto platform"
      },
      {
        "status": "affected",
        "version": "Target Batchers using Pluto platform"
      },
      {
        "status": "affected",
        "version": "and SpeedBatchers using Pluto platform"
      }
    ]
  }
]

References

ics-cert.us-cert.gov/advisories/ICSA-17-094-02B

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.6%

JSON

Related for CVE-2017-9626

cvelist1 prion1 nvd1 ics2