Design/Logic Flaw

Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of service by deleting the configuration via a wc.dll?wwMaintEditConfig request which reaches an older version of a West Wind Web Connection HTTP service...

CVE-2017-17759

The CVE-2017-17759 issue affects Conarc iChannel, where the wc.dll?wwMaint~EditConfig endpoint exposes an unauthenticated access vector to an outdated West Wind Web Connection HTTP service. Remote attackers can obtain sensitive information, alter the server configuration, or trigger a denial of s...