EUVD-2017-16887

Malware in sbrugna...

EUVD-2017-16891

Malware in sbrugna...

ABB VSN300 WiFi Logger Card Authentication Bypass

Binary data 720129.prm...

ABB VSN300 WiFi Logger Card Authentication Bypass

Binary data 720130.prm...

ABB VSN300 Wifi Logger Card Detection

Binary data 761511.prm...

ABB VSN300 Wifi Logger Card Detection

Binary data 761512.prm...

CVE-2017-7920

An Improper Authentication issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, and VSN300 WiFi Logger Card for React versions 2.1.3 and prior. By accessing a specific uniform resource locator URL on the web server, a malicious user is able to access internal information...

Authentication flaw

An Improper Authentication issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, and VSN300 WiFi Logger Card for React versions 2.1.3 and prior. By accessing a specific uniform resource locator URL on the web server, a malicious user is able to access internal information...

CVE-2017-7920

An Improper Authentication issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, and VSN300 WiFi Logger Card for React versions 2.1.3 and prior. By accessing a specific uniform resource locator URL on the web server, a malicious user is able to access internal information...

CVE-2017-7916

ABB VSN300 WiFi Logger Card and VSN300 WiFi Logger Card for React (versions 1.8.15 and prior; 2.1.3 and prior) are affected by a Privileges/Access Controls vulnerability where the Guest account isn’t properly restricted, potentially allowing access to restricted configuration information. The ICS...

CVE-2017-7920

The CVE-2017-7920 issue affects ABB VSN300 WiFi Logger Card and VSN300 WiFi Logger Card for React (versions 1.8.15 and prior; 2.1.3 and prior, respectively). The root cause is Improper Authentication: a malicious actor can access internal status and connected-device information by requesting a sp...

CVE-2017-7916

A Permissions, Privileges, and Access Controls issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, and VSN300 WiFi Logger Card for React versions 2.1.3 and prior. The web application does not properly restrict privileges of the Guest account. A malicious user may be abl...