CVE-2017-7912

2019-04-0814:17:09

CWE-284

icscert

www.cve.org

9.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.3%

JSON

Hanwha Techwin SRN-4000, SRN-4000 firmware versions prior to SRN4000_v2.16_170401, A specially crafted http request and response could allow an attacker to gain access to the device management page with admin privileges without proper authentication.

CNA Affected

[
  {
    "product": "SRN-4000",
    "vendor": "Hanwha Techwin",
    "versions": [
      {
        "status": "affected",
        "version": "firmware versions prior to SRN4000_v2.16_170401"
      }
    ]
  }
]

References

ics-cert.us-cert.gov/advisories/ICSA-17-136-03