CVE-2017-9664

In ABB SREA-01 revisions A, B, C: application versions up to 3.31.5, and SREA-50 revision A: application versions up to 3.32.8, an attacker may access internal files of ABB SREA-01 and SREA-50 legacy remote monitoring tools without any authorization over the network using a HTTP request which refers to files using ../../ relative paths. Once the internal password file is retrieved, the password hash can be identified using a brute force attack. There is also an exploit allowing running of commands after authorization.
References
Link Resource
https://ics-cert.us-cert.gov/advisories/ICSA-17-222-05 Mitigation Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/100260 Third Party Advisory VDB Entry
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:abb:srea-50_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:srea-50:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:abb:srea-01_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abb:srea-01:-:*:*:*:*:*:*:*

Information

Published : 2018-05-24 13:29

Updated : 2019-10-09 16:30


NVD link : CVE-2017-9664

Mitre link : CVE-2017-9664


JSON object : View

CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Advertisement

dedicated server usa

Products Affected

abb

  • srea-50
  • srea-50_firmware
  • srea-01_firmware
  • srea-01