CVE-2017-5167

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Users do not have any option to change their own passwords...

CVE-2017-5166

CVE-2017-5166 affects the BINOM3 Universal multifunctional Electric Power Quality Meter. The vulnerability is an information exposure (CWE-200) flaw that can be used to gain privileged access to the device. From the connected records, the issue is described with high impact: confidential, integri...

BINOM3 Electric Power Quality Meter Cross-Site Scripting Vulnerability

BINOM3 Electric Power Quality Meter is an electrical power quality monitor for SCADA systems from the Russian company BINOM3. A cross-site scripting vulnerability exists in BINOM3 Electric Power Quality Meter that could allow an attacker to execute arbitrary script code cross-site scripting withi...

BINOM3 Electric Power Quality Meter Information Disclosure Vulnerability

BINOM3 Electric Power Quality Meter is an electrical power quality monitor for SCADA systems from the Russian company BINOM3. An information disclosure vulnerability exists in BINOM3 Electric Power Quality Meter that could be exploited by an attacker to provide remote services with access to...

BINOM3 Electric Power Quality Meter Unauthorized Operation Vulnerability

BINOM3 Electric Power Quality Meter is an electrical power quality monitor for SCADA systems from the Russian company BINOM3. An unauthorized operation vulnerability exists in BINOM3 Electric Power Quality Meter, which could be exploited by an attacker to perform unauthorized operations on the...

BINOM3 Electric Power Quality Meter Hard-Coded Vulnerability

BINOM3 Electric Power Quality Meter is an electrical power quality monitor for SCADA systems from the Russian company BINOM3. A hard-coded vulnerability exists in BINOM3 Electric Power Quality Meter, where users do not have permission to change their passwords...

BINOM3 Electric Power Quality Meter Information Disclosure Vulnerability (CNVD-2017-01594)

BINOM3 Electric Power Quality Meter is an electrical power quality monitor for SCADA systems from the Russian company BINOM3. An information disclosure vulnerability exists in BINOM3 Electric Power Quality Meter that could be exploited by an attacker to gain privileged access to the device...

Binom3 Web Management Login Scanner, Config and Password File Dump

This module scans for Binom3 Multifunctional Revenue Energy Meter and Power Quality Analyzer management login portals, and attempts to identify valid credentials. There are four 4 default accounts - 'root'/'root', 'admin'/'1', 'alg'/'1', 'user'/'1'. In addition to device config, 'root' user can...

BINOM3 Electric Power Quality Meter

CVSS v3 10 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: BINOM3 Equipment: Electric Power Quality Meter Vulnerabilities: Cross-site scripting, access control issues, cross-site request forgery CSRF, sensitive information stored in clear-text, and weak credentials management...

Multiple Stored Cross-Site Scripting Vulnerabilities in BINOM3 Electric Power Quality Meter

The BINOM3 Electric Power Quality Meter is a universal multifunctional power quality monitor. BINOM3 Electric Power Quality Meter suffers from multiple stored cross-site scripting vulnerabilities. Attacks that allow authentication by injecting arbitrary JavaScript into specific input fields,...

BINOM3 Electric Power Quality Meter Sensitive Information Disclosure Vulnerability

The BINOM3 Electric Power Quality Meter is a universal multifunctional power quality monitor. BINOM3 Electric Power Quality Meter is vulnerable to sensitive information disclosure. Since the management portal is configured for HTTP by default, an attacker in the right position could sniff all log...

BINOM3 Electric Power Quality Meter Cross-Site Request Forgery Vulnerability

The BINOM3 Electric Power Quality Meter is a universal multifunctional power quality monitor. A cross-site request forgery vulnerability exists in BINOM3 Electric Power Quality Meter. Exploitation of this vulnerability could allow unauthorized actions on the device, such as configuration paramete...

Multiple Reflective Cross-Site Scripting Vulnerabilities in BINOM3 Electric Power Quality Meter

The BINOM3 Electric Power Quality Meter is a universal multifunctional power quality monitor. BINOM3 Electric Power Quality Meter suffers from multiple reflected cross-site scripting vulnerabilities. These vulnerabilities can be exploited to inject arbitrary JavaScript at a specially crafted URL,...