CVE-2017-5146

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11U05, and VMU-C PV prior to firmware Version A17. Sensitive information is stored in clear-text...

CVE-2017-5144

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11U05, and VMU-C PV prior to firmware Version A17. The access control flaw allows access to most application functions without authentication...

Authentication flaw

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11U05, and VMU-C PV prior to firmware Version A17. The access control flaw allows access to most application functions without authentication...

Code injection

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11U05, and VMU-C PV prior to firmware Version A17. Sensitive information is stored in clear-text...

Cross site request forgery (csrf)

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11U05, and VMU-C PV prior to firmware Version A17. Successful exploitation of this CROSS-SITE REQUEST FORGERY CSRF vulnerability can allow execution of unauthorized actions on the device such as configuration parameter...

CVE-2017-5144

The CVE-2017-5144 issue affects Carlo Gavazzi VMU-C EM (pre-A11_U05) and VMU-C PV (pre-A17) where an access control flaw allows access to most application functions without authentication. According to the ICS-CERT advisory, the root cause is an access-control weakness (CWE-284) enabling remote, ...

CVE-2017-5145

The CVE-2017-5145 entry describes a CROSS-SITE REQUEST FORGERY (CSRF) vulnerability in Carlo Gavazzi VMU-C EM (firmware before A11_U05) and VMU-C PV (firmware before A17). Successful exploitation can allow unauthorized configuration changes and saving of modified configurations. Public guidance i...

CVE-2017-5146

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11U05, and VMU-C PV prior to firmware Version A17. Sensitive information is stored in clear-text...

CVE-2017-5146

CVE-2017-5146 affects Carlo Gavazzi VMU-C EM (before firmware A11_U05) and VMU-C PV (before firmware A17). The issue is that sensitive information is stored in clear text on these devices, constituting an information disclosure vulnerability. Public sources describe the affected products and firm...

CVE-2017-5144

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11U05, and VMU-C PV prior to firmware Version A17. The access control flaw allows access to most application functions without authentication...

PT-2017-16340

Name of the Vulnerable Software and Affected Versions Carlo Gavazzi VMU-C EM versions prior to A11 U05 Carlo Gavazzi VMU-C PV versions prior to A17 Description An issue was discovered that allows access to most application functions without authentication due to an access control flaw...

CVE-2017-5144: Undefined Security Weakness

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11U05, and VMU-C PV prior to firmware Version A17. The access control flaw allows access to most application functions without authentication...

PT-2017-16341

Name of the Vulnerable Software and Affected Versions Carlo Gavazzi VMU-C EM versions prior to A11 U05 Carlo Gavazzi VMU-C PV versions prior to A17 Description An issue was discovered that allows execution of unauthorized actions on the device, such as configuration parameter changes and saving...

CVE-2017-5145: Cross-Site Request Forgery (CSRF)

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11U05, and VMU-C PV prior to firmware Version A17. Successful exploitation of this CROSS-SITE REQUEST FORGERY CSRF vulnerability can allow execution of unauthorized actions on the device such as configuration parameter...

PT-2017-16342

Name of the Vulnerable Software and Affected Versions Carlo Gavazzi VMU-C EM versions prior to A11 U05 Carlo Gavazzi VMU-C PV versions prior to A17 Description An issue was discovered where sensitive information is stored in clear-text. Recommendations For Carlo Gavazzi VMU-C EM versions prior to...

CVE-2017-5146: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11U05, and VMU-C PV prior to firmware Version A17. Sensitive information is stored in clear-text...

Carlo Gavazzi Automation VMU-C EM and VMU-C PV have unauthorized access vulnerabilities

Carlo Gavazzi Automation VMU-C EM and VMU-C PV are control modules in the automation products of the Italian company Carlo Gavazzi Automation. An unauthorized access vulnerability exists in the Carlo Gavazzi Automation VMU-C EM and VMU-C PV. An unauthenticated attacker could exploit the...

Carlo Gavazzi Automation VMU-C EM and VMU-C PV suffer from information disclosure vulnerabilities

Carlo Gavazzi Automation VMU-C EM and VMU-C PV are control modules in the automation products of the Italian company Carlo Gavazzi Automation. The Carlo Gavazzi Automation VMU-C EM and VMU-C PV store sensitive information in clear text, allowing remote attackers to exploit the vulnerability to re...

Cross-Site Request Forgery Vulnerability in Carlo Gavazzi Automation VMU-C EM and VMU-C PV

Carlo Gavazzi Automation VMU-C EM and VMU-C PV are control modules in the automation products of the Italian company Carlo Gavazzi Automation. A cross-site request forgery vulnerability exists in the Carlo Gavazzi Automation VMU-C EM and VMU-C PV. A remote attacker can exploit the vulnerability b...

Carlo Gavazzi VMU-C EM and VMU-C PV

CVSS V3 10 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Carlo Gavazzi Equipment: VMU-C EM, VMU-C PV Vulnerabilities: Access Control Flaws, CSRF, Sensitive Information Stored In Clear Text AFFECTED PRODUCTS Carlo Gavazzi reports that the vulnerabilities affect the following...