CVE-2017-16743

EPSS 3.1%CWE-285

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 3.1%KEV nãoPoC —Patch —

Ciclo de vida

12 jan 2018Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

An Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0 to 1.32. A remote unauthenticated attacker may be able to craft special HTTP requests allowing an attacker to bypass web-service authentication allowing the attacker to obtain administrative privileges on the device.

Produtos afetados

n/a · PHOENIX CONTACT FL SWITCH

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://cert.vde.com/en-us/advisories/vde-2017-006 https://ics-cert.us-cert.gov/advisories/ICSA-18-011-03