Lucene search
PRIOn knowledge basePRION:CVE-2017-17974HistoryDec 29, 2017 - 9:29 p.m.
Design/Logic Flaw
2017-12-2921:29:00
PRIOn knowledge base
www.prio-n.com
2
BA SYSTEMS BAS Web on BAS920 devices (with Firmware 01.01.00*, HTTPserv 00002, and Script 02.*) and ISC2000 devices allows remote attackers to obtain sensitive information via a request for isc/get_sid_js.aspx or isc/get_sid.aspx, as demonstrated by obtaining administrative access by subsequently using the credential information for the Supervisor/Administrator account.
| CPE | Name | Operator | Version |
|---|---|---|---|
| bas920_firmware | eq | 01.01.00 | |
| isc2000_firmware | eq | 01.01.00 |
Related
nvd
nvd
CVE-2017-17974
2017-12-29 21:29:00
seebug
seebug
SCADAS "BAS920 & ISC2000" Credentials Exposed(CVE-2017-17974)
2018-05-10 00:00:00
cvelist
cvelist
CVE-2017-17974
2022-10-03 16:23:21
cve
cve
CVE-2017-17974
2022-10-03 16:23:21
openvas
openvas
Building Automation Systems BAS920 Information Disclosure Vulnerability
2018-01-03 00:00:00