Critical ICSA-17-243-04 2 CVEs

OPW Fuel Management Systems SiteSentinel Integra and SiteSentinel iSite

Published Aug 31, 2017 · Updated Aug 31, 2017

Vendor: OPW Fuel Management Systems Product: SiteSentinel Integra and SiteSentinel iSite

Summary

ATTENTION: Remotely exploitable/low skill level to exploit.

Vulnerabilities 2

Unscored —

CVE-2017-12731

A SQL Injection issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500,…

Sep 9, 2017
Unscored —

CVE-2017-12733

A Missing Authentication for Critical Function issue was discovered in OPW Fuel Management Systems SiteSentinel Integra…

Sep 9, 2017

Revision history

2017-08-31 #1
ICSA-17-243-04 OPW Fuel Management Systems SiteSentinel Integra and SiteSentinel iSite

References

ICS Advisory ICSA-17-243-04 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-243-04
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-17-243-04