7.5high
CVE-2017-14026
In Ice Qube Thermal Management Center versions prior to version 4.13, the web application does not properly authenticate users which may al…
Published 8 y ago · modified 4 mo ago · JSON
CVSS
7.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.8%
percentile 78%
Public exploits
0
none known
Summary
In Ice Qube Thermal Management Center versions prior to version 4.13, the web application does not properly authenticate users which may allow an attacker to gain access to sensitive information.
Exploit prediction (EPSS)
1.76% probability of exploitation in the next 30 days, higher than 78% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Affected products
- Ice Qube Thermal Management Center
Classification
- Weakness
- CWE-287 Improper Authentication
References
- ics-cert.us-cert.gov /advisories/ICSA-18-249-01 · x_refsource_MISC, x_transferred
- securityfocus.com /bid/105303 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2017-14026
- NVD: CVE-2017-14026
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.