PT-2017-19084 · Envitech · Envitech Envidas Ultimate

Published 2017-10-17 · Updated 2019-10-09 · CVE-2017-9625

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Envitech EnviDAS Ultimate versions prior to 1.0.0.5

Description An issue with improper authentication was found, allowing potential attackers to view information, modify settings, or execute code remotely due to the lack of proper authentication in the web application.

Recommendations For versions prior to 1.0.0.5, update to version 1.0.0.5 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2017-9625

Affected Products

Envitech Envidas Ultimate

References · 4

• https://osv.dev/vulnerability/CVE-2017-9625 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-9625 · Security Note
• http://securityfocus.com/bid/101249 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-17-285-03 · Note