Skip to content
OpenAdvisories
Critical ICSA-19-122-01 6 CVEs

Orpak SiteOmat

Published May 2, 2019 · Updated May 2, 2019

Vendor: Orpak, Gilbarco Veeder-Root Product: SiteOmat

Summary

Successful exploitation of these vulnerabilities could result in arbitrary remote code execution resulting in possible denial-of-service conditions and unauthorized access to view and edit monitoring, configuration, and payment information.

Vulnerabilities 6

  • Critical 9.8
    CVE-2017-14728

    An authentication bypass was found in an unknown area of the SiteOmat source code. All SiteOmat BOS versions are affect…

  • Critical 9.8
    CVE-2017-14851

    A SQL injection vulnerability exists in all Orpak SiteOmat versions prior to 2017-09-25. The vulnerability is in the lo…

  • Critical 9.1
    CVE-2017-14854

    A stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote code execution. The vul…

  • High 8.6
    CVE-2017-14852

    An insecure communication was found between a user and the Orpak SiteOmat management console for all known versions, du…

  • High 8.6
    CVE-2017-14853

    The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due to a searc…

  • Medium 6.1
    CVE-2017-14850

    All known versions of the Orpak SiteOmat web management console is vulnerable to multiple instances of Stored Cross-sit…

Revision history

  1. #1

    ICSA-19-122-01 Orpak SiteOmat

References