CVE-2017-5167 :: Enginsight Vulnerability Database

Severity

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Atk. Vector

NETWORK

Atk. Complexity

LOW

Priv. Required

NONE

Base Score

CVSS 3.x

EPSS Score

Percentile: 48%

Vendor	Product	Version
binom3	universal_multifunctional_electric_power_quality_meter_firmware	-

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-798 - Use of Hard-coded Credentials
The software contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.

References

http://www.securityfocus.com/bid/93028

https://ics-cert.us-cert.gov/advisories/ICSA-17-031-01A

http://www.securityfocus.com/bid/93028

https://ics-cert.us-cert.gov/advisories/ICSA-17-031-01A