CVE-2017-12733 A Missing Authentication for Critical Function issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSite ATG consoles with the foll...
CriticalCVSS 9.8
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A Missing Authentication for Critical Function issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSite ATG consoles with the following software versions: older than V175, V175-V189, V191-V195, and V16Q3.1. An attacker may create an application user account to gain administrative privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opwglobal sitesentinel isite atg firmware | <= 175 | No fix listed |
| opwglobal sitesentinel isite atg firmware | = 16q3.1 | No fix listed |
| opwglobal sitesentinel isite atg firmware | = 189 | No fix listed |
| opwglobal sitesentinel isite atg firmware | = 191 | No fix listed |
| opwglobal sitesentinel isite atg firmware | = 195 | No fix listed |
| opwglobal sitesentinel integra 500 firmware | <= 175 | No fix listed |
| opwglobal sitesentinel integra 500 firmware | = 16q3.1 | No fix listed |
| opwglobal sitesentinel integra 500 firmware | = 189 | No fix listed |
| opwglobal sitesentinel integra 500 firmware | = 191 | No fix listed |
| opwglobal sitesentinel integra 500 firmware | = 195 | No fix listed |
| opwglobal sitesentinel integra 100 firmware | <= 175 | No fix listed |
| opwglobal sitesentinel integra 100 firmware | = 16q3.1 | No fix listed |
| opwglobal sitesentinel integra 100 firmware | = 189 | No fix listed |
| opwglobal sitesentinel integra 100 firmware | = 191 | No fix listed |
| opwglobal sitesentinel integra 100 firmware | = 195 | No fix listed |
References
- 100563 third-party-advisory vdb-entry
- ics-cert.us-cert.gov mitigation third-party-advisory us-government-resource vdb-entry