PT-2017-11790 · Datataker · Datataker Dt80 Dex

Nassim Asrir · Published 2017-07-12 · Updated 2026-04-30 · CVE-2017-11165

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions dataTaker DT80 dEX version 1.50.012

Description The issue allows remote attackers to obtain sensitive credential and configuration information. This can be achieved via a direct request for the "/services/getFile.cmd?userfile=config.xml" API endpoint.

Recommendations For version 1.50.012, restrict access to the "/services/getFile.cmd?userfile=config.xml" API endpoint to minimize the risk of exploitation.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-11165

Affected Products

Datataker Dt80 Dex

References · 5

• 🔥 https://exploit-db.com/exploits/42313 · Exploit
• 🔥 https://packetstormsecurity.com/files/143328/DataTaker-DT80-dEX-1.50.012-Sensitive-Configuration-Exposure.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-11165 · Security Note
• https://osv.dev/vulnerability/CVE-2017-11165 · Vendor Advisory
• https://t.me/cveNotify/161542 · Telegram Post