EUVD-2017-18595

Malware in sbrugna...

ABB SREA-50 Communications Adapter Detection

Binary data 761514.prm...

ABB SREA-01 and SREA-50 Ethernet Adapters Path Traversal

Binary data 720133.prm...

Authorization

In ABB SREA-01 revisions A, B, C: application versions up to 3.31.5, and SREA-50 revision A: application versions up to 3.32.8, an attacker may access internal files of ABB SREA-01 and SREA-50 legacy remote monitoring tools without any authorization over the network using a HTTP request which...

CVE-2017-9664

In ABB SREA-01 revisions A, B, C: application versions up to 3.31.5, and SREA-50 revision A: application versions up to 3.32.8, an attacker may access internal files of ABB SREA-01 and SREA-50 legacy remote monitoring tools without any authorization over the network using a HTTP request which...

CVE-2017-9664

In ABB SREA-01 revisions A, B, C: application versions up to 3.31.5, and SREA-50 revision A: application versions up to 3.32.8, an attacker may access internal files of ABB SREA-01 and SREA-50 legacy remote monitoring tools without any authorization over the network using a HTTP request which...

CVE-2017-9664

CVE-2017-9664 affects ABB SREA-01 (revisions A/B/C; up to 3.31.5) and SREA-50 (revision A; up to 3.32.8). Vulnerability: Relative Path Traversal via HTTP using ../../ to read internal files (password hash exposure) and, after authorization, an exploit to run commands. Impact: remote attacker may ...

PT-2018-8521

Name of the Vulnerable Software and Affected Versions ABB SREA-01 versions up to 3.31.5 ABB SREA-50 version up to 3.32.8 Description The issue allows an attacker to access internal files of ABB SREA-01 and SREA-50 legacy remote monitoring tools without authorization over the network. This is...

CVE-2017-9664: Relative Path Traversal

In ABB SREA-01 revisions A, B, C: application versions up to 3.31.5, and SREA-50 revision A: application versions up to 3.32.8, an attacker may access internal files of ABB SREA-01 and SREA-50 legacy remote monitoring tools without any authorization over the network using a HTTP request which...

ABB SREA-01 and SREA-50

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available. Vendor: ABB Equipment: SREA-01 and SREA-50 Vulnerability: Relative Path Traversal AFFECTED PRODUCTS ABB reports that the vulnerability affects the following SREA-01 and SREA-50 legacy remote...