PT-2017-17992 · Abb · Abb Vsn300 Wifi Logger Card For React+1

Published 2017-08-07 · Updated 2019-10-09 · CVE-2017-7916

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ABB VSN300 WiFi Logger Card versions 1.8.15 and prior ABB VSN300 WiFi Logger Card for React versions 2.1.3 and prior

Description A Permissions, Privileges, and Access Controls issue was found in the web application, where it does not properly restrict privileges of the Guest account. This could allow a malicious user to gain access to configuration information that should be restricted.

Recommendations For ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, restrict access to the Guest account until a fix is available. For ABB VSN300 WiFi Logger Card for React versions 2.1.3 and prior, limit the privileges of the Guest account to prevent unauthorized access to configuration information.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-264

CWE-269

Related Identifiers

CVE-2017-7916

Affected Products

Abb Vsn300 Wifi Logger Card

Abb Vsn300 Wifi Logger Card For React

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-7916 · Security Note
• https://osv.dev/vulnerability/CVE-2017-7916 · Vendor Advisory
• http://search.abb.com/library/Download.aspx?DocumentID=9AKK107045A1977&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-17-192-03 · Note
• http://securityfocus.com/bid/99558 · Note