High ICSA-17-257-01 4 CVEs

LOYTEC LVIS-3ME

Published Sep 14, 2017 · Updated Sep 14, 2017

Vendor: Loytec Product: LVIS-3ME

Summary

ATTENTION: Remotely exploitable/low skill level to exploit.

Vulnerabilities 4

Unscored —

CVE-2017-13992

An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not utili…

Oct 5, 2017
Unscored —

CVE-2017-13994

A Cross-site Scripting issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web interface lacks proper …

Oct 5, 2017
Unscored —

CVE-2017-13996

A Relative Path Traversal issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web user interface fails…

Oct 5, 2017
Unscored —

CVE-2017-13998

An Insufficiently Protected Credentials issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The applicatio…

Oct 5, 2017

Revision history

2017-09-14 #1
ICSA-17-257-01 LOYTEC LVIS-3ME

References

ICS Advisory ICSA-17-257-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-257-01
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-17-257-01