PT-2019-8662 · Marel · Marel Food Processing Systems Pluto Platform

Published 2019-03-27 · Updated 2019-10-09 · CVE-2017-9626

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Marel Food Processing Systems Pluto platform (affected versions not specified)

Description The issue concerns systems using the Marel Food Processing Systems Pluto platform, which do not restrict remote access. To address this, Marel has created an update for Pluto-based applications that implements SSH authentication to restrict remote access.

Recommendations For the Marel Food Processing Systems Pluto platform, apply the update provided by Marel to restrict remote access by implementing SSH authentication.

Fix

Incorrect Permission

Improper Access Control

Weakness Enumeration

CWE-732

CWE-284

Related Identifiers

CVE-2017-9626

Affected Products

Marel Food Processing Systems Pluto Platform

References · 3

• https://osv.dev/vulnerability/CVE-2017-9626 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-9626 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-17-094-02B · Note