CVE-2017-14852

2019-06-0318:57:36

mitre

www.cve.org

9.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.4%

JSON

An insecure communication was found between a user and the Orpak SiteOmat management console for all known versions, due to an invalid SSL certificate. The attack allows for an eavesdropper to capture the communication and decrypt the data.

References

www.orpak.com

www.securityfocus.com/bid/108167

ics-cert.us-cert.gov/advisories/ICSA-19-122-01