CVE-2017-5164

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Input sent from a malicious client is not properly verified by the server. An attacker can execute arbitrary script code in another user's browser session CROSS-SITE SCRIPTING...

CVE-2016-5782

The CVE affects Locus Energy LGate devices (LGate firmware prior to 1.05H and models 50, 100, 101, 120, 320). The root cause is improper validation of POST data in the PHP-based web interface, enabling command injection via the LGate web server. Impact: remote, unauthenticated attackers could exe...

CVE-2017-5166

CVE-2017-5166 affects the BINOM3 Universal multifunctional Electric Power Quality Meter. The vulnerability is an information exposure (CWE-200) flaw that can be used to gain privileged access to the device. From the connected records, the issue is described with high impact: confidential, integri...

CVE-2017-5165

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. There is no CSRF Token generated per page and/or per sensitive function. Successful exploitation of this vulnerability can allow silent execution of unauthorized actions on the device such as configuration...

CVE-2017-5167

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Users do not have any option to change their own passwords...

CVE-2017-5166

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. An INFORMATION EXPOSURE flaw can be used to gain privileged access to the device...

CVE-2017-5164

CVE-2017-5164 affects BINOM3 Electric Power Quality Meter (Universal multifunctional model). The vulnerability is Cross-Site Scripting caused by input from a malicious client not being properly verified by the server, allowing script execution in another user’s browser session. The CVE is describ...

BINOM3 Electric Power Quality Meter Hard-Coded Vulnerability

BINOM3 Electric Power Quality Meter is an electrical power quality monitor for SCADA systems from the Russian company BINOM3. A hard-coded vulnerability exists in BINOM3 Electric Power Quality Meter, where users do not have permission to change their passwords...

BINOM3 Electric Power Quality Meter Cross-Site Scripting Vulnerability

BINOM3 Electric Power Quality Meter is an electrical power quality monitor for SCADA systems from the Russian company BINOM3. A cross-site scripting vulnerability exists in BINOM3 Electric Power Quality Meter that could allow an attacker to execute arbitrary script code cross-site scripting withi...

BINOM3 Electric Power Quality Meter Information Disclosure Vulnerability (CNVD-2017-01594)

BINOM3 Electric Power Quality Meter is an electrical power quality monitor for SCADA systems from the Russian company BINOM3. An information disclosure vulnerability exists in BINOM3 Electric Power Quality Meter that could be exploited by an attacker to gain privileged access to the device...

BINOM3 Electric Power Quality Meter Unauthorized Operation Vulnerability

BINOM3 Electric Power Quality Meter is an electrical power quality monitor for SCADA systems from the Russian company BINOM3. An unauthorized operation vulnerability exists in BINOM3 Electric Power Quality Meter, which could be exploited by an attacker to perform unauthorized operations on the...

BINOM3 Electric Power Quality Meter Information Disclosure Vulnerability

BINOM3 Electric Power Quality Meter is an electrical power quality monitor for SCADA systems from the Russian company BINOM3. An information disclosure vulnerability exists in BINOM3 Electric Power Quality Meter that could be exploited by an attacker to provide remote services with access to...

BINOM3 Electric Power Quality Meter (Update A)

CVSS v3 10 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: BINOM3 Equipment: Electric Power Quality Meter Vulnerabilities: Cross-site scripting, access control issues, cross-site request forgery CSRF, sensitive information stored in clear-text, and weak credentials management...

BINOM3 Electric Power Quality Meter

CVSS v3 10 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: BINOM3 Equipment: Electric Power Quality Meter Vulnerabilities: Cross-site scripting, access control issues, cross-site request forgery CSRF, sensitive information stored in clear-text, and weak credentials management...

tqdm Remote Code Execution Vulnerability

tqdm is a fast, scalable progress meter from Python. A remote code execution vulnerability exists in tqdm. An attacker can exploit this vulnerability to execute arbitrary code in the context of an affected application...

Schneider Electric IONXXXX Series Power Meter Vulnerabilities

OVERVIEW This advisory is a follow-up to the alert titled ICS-ALERT-16-256-02 Schneider Electric ION Power Meter CSRF Vulnerability that was published September 12, 2016, on the NCCIC/ICS-CERT web site. Independent researcher Karn Ganeshen has identified a cross-site request forgery CSRF and no...

BINOM3 Electric Power Quality Meter Weak Password Vulnerability

The BINOM3 Electric Power Quality Meter is a universal multifunctional power quality monitor. The BINOM3 Electric Power Quality Meter is vulnerable to a weak password. The device is configured with four login accounts "admin / 1", "user / 1", "alg / 1", "telem / 1". To further make it easier for...

BINOM3 Electric Power Quality Meter Cross-Site Request Forgery Vulnerability

The BINOM3 Electric Power Quality Meter is a universal multifunctional power quality monitor. A cross-site request forgery vulnerability exists in BINOM3 Electric Power Quality Meter. Exploitation of this vulnerability could allow unauthorized actions on the device, such as configuration paramete...

Unspecified Cross-Site Request Forgery Vulnerability in Schneider Electric ION Power Meter

The Schneider Electric ION Power Meter is an electrical power meter. A cross-site request forgery vulnerability exists in the Schneider Electric ION Power Meter. The program fails to properly validate HTTP requests, allowing remote attackers to exploit the vulnerability to perform certain...

BINOM3 Electric Power Quality Meter Stores Sensitive Information Vulnerability

The BINOM3 Electric Power Quality Meter is a universal multifunctional power quality monitor. A vulnerability exists in the storage of sensitive information in the BINOM3 Electric Power Quality Meter. An attacker could exploit the vulnerability to gain privileged access to the device...