High ICSA-17-040-01 2 CVEs

Hanwha Techwin Smart Security Manager

Published Feb 9, 2017 · Updated Feb 9, 2017

Vendor: Hanwha Techwin Product: Smart Security Manager

Summary

ATTENTION: Remotely exploitableVendor: Hanwha TechwinEquipment: Smart Security ManagerVulnerabilities: Remote Code Execution

Vulnerabilities 2

Unscored —

CVE-2017-5168

An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Path Traversal vulner…

Feb 13, 2017
Unscored —

CVE-2017-5169

An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Cross Site Request Fo…

Feb 13, 2017

Revision history

2017-02-09 #1
ICSA-17-040-01 Hanwha Techwin Smart Security Manager

References

ICS Advisory ICSA-17-040-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-040-01
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-17-040-01