Critical ICSA-17-283-02 2 CVEs

JanTek JTC-200

Published Oct 10, 2017 · Updated Oct 10, 2017

Vendor: JanTek Product: JTC-200

Summary

ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available.

Vulnerabilities 2

Unscored —

CVE-2016-5789

A Cross-site Request Forgery issue was discovered in JanTek JTC-200, all versions. An attacker could perform actions wi…

Oct 13, 2017
Unscored —

CVE-2016-5791

An Improper Authentication issue was discovered in JanTek JTC-200, all versions. The improper authentication could prov…

Oct 13, 2017

Revision history

2017-10-10 #1
ICSA-17-283-02 JanTek JTC-200

References

ICS Advisory ICSA-17-283-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-283-02
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-17-283-02