PT-2017-11790 · Datataker · Datataker Dt80 Dex

Nassim Asrir · Publicado 2017-07-12 · Atualizado 2026-04-30 · CVE-2017-11165

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions dataTaker DT80 dEX version 1.50.012

Description The issue allows remote attackers to obtain sensitive credential and configuration information. This can be achieved via a direct request for the "/services/getFile.cmd?userfile=config.xml" API endpoint.

Recommendations For version 1.50.012, restrict access to the "/services/getFile.cmd?userfile=config.xml" API endpoint to minimize the risk of exploitation.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-11165

Produtos afetados

Datataker Dt80 Dex

Referências · 5

• 🔥 https://exploit-db.com/exploits/42313 · Exploit
• 🔥 https://packetstormsecurity.com/files/143328/DataTaker-DT80-dEX-1.50.012-Sensitive-Configuration-Exposure.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-11165 · Nota de Segurança
• https://t.me/cveNotify/161542 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2017-11165 · Aviso do Fabricante