EUVD-2017-18595

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Attacker can access internal files of ABB SREA tools via HTTP requests and exploit password hashing.

Reporter	Title	Published	Views	Family All 8
Tenable Nessus	ABB SREA-01 and SREA-50 Ethernet Adapters Path Traversal	8 May 201900:00	–	nessus
ATTACKERKB	CVE-2017-9664	24 May 201820:29	–	attackerkb
CVE	CVE-2017-9664	24 May 201820:00	–	cve
Cvelist	CVE-2017-9664	24 May 201820:00	–	cvelist
ICS	ABB SREA-01 and SREA-50	10 Aug 201700:00	–	ics
NVD	CVE-2017-9664	24 May 201820:29	–	nvd
OSV	CVE-2017-9664	24 May 201820:29	–	osv
Prion	Authorization	24 May 201820:29	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "ff6e7fac-a899-3bf4-bb89-ea6d5c8389dc",
        "vendor": {
          "name": "ICS-CERT"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "f2fb48f2-5929-38d5-8812-d0d52a9fbb51",
        "product": {
          "name": "ABB SREA-01 and SREA-50"
        },
        "product_version": "SREA-01 revisions A, B, C: application versions up to 3.31.5, and SREA-50 revision A: application versions up to 3.32.8."
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/100260
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-17-222-05
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

9.5High risk

Vulners AI Score9.5

CVSS 39.8

CVSS 25

EPSS0.02094