CVEブラウザに戻る

CVE-2017-5145

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1660%

EPSS Percentile10.96th

Published2017年2月13日

Last Modified2026年5月13日

Vulnerability Description

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. Successful exploitation of this CROSS-SITE REQUEST FORGERY (CSRF) vulnerability can allow execution of unauthorized actions on the device such as configuration parameter changes, and saving modified configuration.

Affected Platforms (CPE)

💻

Carlosgavazzi

Vmu C Em Firmware

All versions

💻

Carlosgavazzi

Vmu C Pv Firmware

All versions

References & Advisories

🔗 http://www.securityfocus.com/bid/95411

🔗 https://ics-cert.us-cert.gov/advisories/ICSA-17-012-03

🔗 http://www.securityfocus.com/bid/95411

🔗 https://ics-cert.us-cert.gov/advisories/ICSA-17-012-03

関連する脆弱性情報

CVE-2017-51449.8

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. T...

CVE-2017-51467.5

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. S...

CVE-2017-772210.0

In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with ...

CVE-2017-721310.0

Zoho ManageEngine Desktop Central before build 100082 allows remote attackers to obtain control over all connected active desktops...