CVE-2017-12709 A Use of Hard-Coded Credentials issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions older than 1.7.5.0. The device utilizes hard-coded credentials,....
MediumCVSS 5.3
EPSS 0.31%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A Use of Hard-Coded Credentials issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions older than 1.7.5.0. The device utilizes hard-coded credentials, which could allow for unauthorized local low-privileged access to the device.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| westermo mrd-305-din firmware | All versions | No fix listed |
| westermo mrd-315-din firmware | All versions | No fix listed |
| westermo mrd-355-din firmware | All versions | No fix listed |
| westermo mrd-455-din firmware | All versions | No fix listed |
References
- 100470 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource