CVE-2017-9944

EPSS 3.0%CWE-288

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 3.0%KEV nãoPoC —Patch —

Lifecycle

26 Dec 2017Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A vulnerability has been identified in Siemens 7KT PAC1200 data manager (7KT1260) in all versions < V2.03. The integrated web server (port 80/tcp) of the affected devices could allow an unauthenticated remote attacker to perform administrative operations over the network.

Affected products

n/a · Siemens 7KT PAC1200 data manager (7KT1260) All versions < V2.03

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-971654.pdf http://www.securityfocus.com/bid/101184