9.8crit
CVE-2017-5162in critical feed1 exploit
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter.
Published 9 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
12.6%
percentile 96%
Public exploits
1
Metasploit
Summary
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Lack of authentication for remote service gives access to application set up and configuration.
Exploit prediction (EPSS)
12.61% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.
Exploits and detections
- Metasploit auxiliary/scanner/http/binom3_login_config_pass_dump Binom3 Web Management Login Scanner, Config and Password File Dump · metasploit auxiliary, normal rank
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Affected products
- n/a BINOM3 Electric Power Quality Meter
Classification
- Weakness
- CWE-306 Missing Authentication for Critical Functionality
References
- ics-cert.us-cert.gov /advisories/ICSA-17-031-01A · x_refsource_MISC, x_transferred
- securityfocus.com /bid/93028 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2017-5162
- NVD: CVE-2017-5162
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.