PT-2017-11950 · Datataker · Datataker Dt8X Dex

Ku7 · Published 2017-07-17 · Updated 2026-04-30 · CVE-2017-11349

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions dataTaker DT8x dEX version 1.72.007

Description The issue allows remote attackers to compose programs or schedules. This can be used for various purposes, including sending e-mail messages or making outbound connections to FTP servers for uploading data.

Recommendations For version 1.72.007, consider restricting access to the scheduling functionality to prevent unauthorized composition of programs or schedules until a fix is available.

Exploit

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2017-11349

Affected Products

Datataker Dt8X Dex

References · 5

• 🔥 https://nullku7.github.io/stuff/exposure/industrial/2017/05/02/Thermofisher-dataTaker.html · Exploit
• https://osv.dev/vulnerability/CVE-2017-11349 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-11349 · Security Note
• https://t.me/cveNotify/161543 · Telegram Post
• https://twitter.com/nullku7/status/859238295959609344 · Note