Lucene search
MitreCVELIST:CVE-2017-17974HistoryDec 29, 2017 - 9:00 p.m.
CVE-2017-17974
2017-12-2921:00:00
mitre
www.cve.org
5
cve-2017-17974
remote attackers
sensitive information
httpserv 00002
script 02
administrative access
BA SYSTEMS BAS Web on BAS920 devices (with Firmware 01.01.00*, HTTPserv 00002, and Script 02.*) and ISC2000 devices allows remote attackers to obtain sensitive information via a request for isc/get_sid_js.aspx or isc/get_sid.aspx, as demonstrated by obtaining administrative access by subsequently using the credential information for the Supervisor/Administrator account.
Related
nvd
nvd
CVE-2017-17974
2017-12-29 21:29:00
prion
prion
Design/Logic Flaw
2017-12-29 21:29:00
seebug
seebug
SCADAS "BAS920 & ISC2000" Credentials Exposed(CVE-2017-17974)
2018-05-10 00:00:00
cve
cve
CVE-2017-17974
2017-12-29 21:29:00
openvas
openvas
Building Automation Systems BAS920 Information Disclosure Vulnerability
2018-01-03 00:00:00