PT-2017-12671 · Opw Fuel Management Systems · Sitesentinel Isite Atg+2

Published 2017-09-09 · Updated 2019-10-09 · CVE-2017-12733

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OPW Fuel Management Systems SiteSentinel Integra 100 versions older than V175 OPW Fuel Management Systems SiteSentinel Integra 100 versions V175 through V189 OPW Fuel Management Systems SiteSentinel Integra 100 versions V191 through V195 OPW Fuel Management Systems SiteSentinel Integra 500 versions older than V175 OPW Fuel Management Systems SiteSentinel Integra 500 versions V175 through V189 OPW Fuel Management Systems SiteSentinel Integra 500 versions V191 through V195 OPW Fuel Management Systems SiteSentinel iSite ATG versions older than V175 OPW Fuel Management Systems SiteSentinel iSite ATG versions V175 through V189 OPW Fuel Management Systems SiteSentinel iSite ATG versions V191 through V195 OPW Fuel Management Systems SiteSentinel iSite ATG version V16Q3.1

Description A Missing Authentication for Critical Function issue was discovered, allowing an attacker to create an application user account and gain administrative privileges.

Recommendations For OPW Fuel Management Systems SiteSentinel Integra 100 versions older than V175, update to a version newer than V175. For OPW Fuel Management Systems SiteSentinel Integra 100 versions V175 through V189, update to a version newer than V189. For OPW Fuel Management Systems SiteSentinel Integra 100 versions V191 through V195, update to a version newer than V195. For OPW Fuel Management Systems SiteSentinel Integra 500 versions older than V175, update to a version newer than V175. For OPW Fuel Management Systems SiteSentinel Integra 500 versions V175 through V189, update to a version newer than V189. For OPW Fuel Management Systems SiteSentinel Integra 500 versions V191 through V195, update to a version newer than V195. For OPW Fuel Management Systems SiteSentinel iSite ATG versions older than V175, update to a version newer than V175. For OPW Fuel Management Systems SiteSentinel iSite ATG versions V175 through V189, update to a version newer than V189. For OPW Fuel Management Systems SiteSentinel iSite ATG versions V191 through V195, update to a version newer than V195. For OPW Fuel Management Systems SiteSentinel iSite ATG version V16Q3.1, update to a version newer than V16Q3.1.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2017-12733

Affected Products

Sitesentinel Integra 100

Sitesentinel Integra 500

Sitesentinel Isite Atg

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-12733 · Security Note
• https://osv.dev/vulnerability/CVE-2017-12733 · Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-17-243-04 · Note
• http://securityfocus.com/bid/100563 · Note