Lucene search

IcscertCVE-2017-5146

HistoryFeb 13, 2017 - 9:59 p.m.

CVE-2017-5146

2017-02-1321:59:02

CWE-200

icscert

web.nvd.nist.gov

carlo gavazzi

vmu-c em

vmu-c pv

firmware

vulnerability

nvd

cve-2017-5146

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.005

Percentile

76.8%

JSON

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. Sensitive information is stored in clear-text.

Affected configurations

Nvd

Node

carlosgavazzivmu-c_em_firmwareMatch-

AND

carlosgavazzivmu-c_emMatch-

Node

carlosgavazzivmu-c_pv_firmwareMatch-

AND

carlosgavazzivmu-c_pvMatch-

VendorProductVersionCPE
carlosgavazzivmu-c_em_firmware-cpe:2.3:o:carlosgavazzi:vmu-c_em_firmware:-:*:*:*:*:*:*:*
carlosgavazzivmu-c_em-cpe:2.3:h:carlosgavazzi:vmu-c_em:-:*:*:*:*:*:*:*
carlosgavazzivmu-c_pv_firmware-cpe:2.3:o:carlosgavazzi:vmu-c_pv_firmware:-:*:*:*:*:*:*:*
carlosgavazzivmu-c_pv-cpe:2.3:h:carlosgavazzi:vmu-c_pv:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
carlosgavazzi	vmu-c_em_firmware	-	cpe:2.3:o:carlosgavazzi:vmu-c_em_firmware:-:::::::*
carlosgavazzi	vmu-c_em	-	cpe:2.3:h:carlosgavazzi:vmu-c_em:-:::::::*
carlosgavazzi	vmu-c_pv_firmware	-	cpe:2.3:o:carlosgavazzi:vmu-c_pv_firmware:-:::::::*
carlosgavazzi	vmu-c_pv	-	cpe:2.3:h:carlosgavazzi:vmu-c_pv:-:::::::*

CNA Affected

[
  {
    "product": "Carlo Gavazzi VMU-C EM and VMU-C PV",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Carlo Gavazzi VMU-C EM and VMU-C PV"
      }
    ]
  }
]

References

www.securityfocus.com/bid/95411

ics-cert.us-cert.gov/advisories/ICSA-17-012-03

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.005

Percentile

76.8%

JSON

Related for CVE-2017-5146