CVE-2017-17974

CVE-2017-17974 affects BA SYSTEMS BAS Web on BAS920 devices (firmware 01.01.00*, HTTPserv 00002, Script 02.*) and ISC2000 devices. The issue arises from an information-disclosure/authorization flaw exposed by requests to isc/get_sid_js.aspx or isc/get_sid.aspx, enabling an attacker to obtain cred...