Vulnerability Description
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. There is no CSRF Token generated per page and/or per (sensitive) function. Successful exploitation of this vulnerability can allow silent execution of unauthorized actions on the device such as configuration parameter changes, and saving modified configuration.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Binom3 | Universal Multifunctional Electric Power Quality Meter Firmware | - |
| Binom3 | Universal Multifunctional Electric Power Quality Meter | - |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/93028Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-031-01AThird Party AdvisoryUS Government Resource
- http://www.securityfocus.com/bid/93028Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-031-01AThird Party AdvisoryUS Government Resource
FAQ
What is CVE-2017-5165?
CVE-2017-5165 is a vulnerability with a CVSS score of 7.6 (HIGH). An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. There is no CSRF Token generated per page and/or per (sensitive) function. Successful exploitation of this vul...
How severe is CVE-2017-5165?
CVE-2017-5165 has been rated HIGH with a CVSS base score of 7.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-5165?
Check the references section above for vendor advisories and patch information. Affected products include: Binom3 Universal Multifunctional Electric Power Quality Meter Firmware, Binom3 Universal Multifunctional Electric Power Quality Meter.