Critical ICSA-17-031-01A 5 CVEs

BINOM3 Electric Power Quality Meter (Update A)

Published Jan 31, 2017 · Updated Feb 7, 2017 · Revision 2

Vendor: BINOM3 Product: power meters

Summary

ATTENTION: Remotely exploitable/low skill level to exploit

Vulnerabilities 5

Unscored —

CVE-2017-5162 Public exploit EPSS 13%

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Lack of authentication for re…

Feb 13, 2017
Unscored —

CVE-2017-5164

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Input sent from a malicious c…

Feb 13, 2017
Unscored —

CVE-2017-5165

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. There is no CSRF Token genera…

Feb 13, 2017
Unscored —

CVE-2017-5166

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. An INFORMATION EXPOSURE flaw …

Feb 13, 2017
Unscored —

CVE-2017-5167

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Users do not have any option …

Feb 13, 2017

Revision history

2017-02-07 #2
ICSA-17-031-01A BINOM3 Electric Power Quality Meter (Update A)
2017-01-31 #1
ICSA-17-031-01 BINOM3 Electric Power Quality Meter

References

ICS Advisory ICSA-17-031-01A Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-031-01a
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-17-031-01a