CVE-2017-14855 Red Lion HMI panels allow remote attackers to cause a denial of service (software exception) via an HTTP POST request to a long URI that does not exist, as demonstrated by version HMI 2.41 PLC 2.42.
HighCVSS 8.6
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Red Lion HMI panels allow remote attackers to cause a denial of service (software exception) via an HTTP POST request to a long URI that does not exist, as demonstrated by version HMI 2.41 PLC 2.42.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redlion hmi panel firmware | = 2.41 | No fix listed |
References
- misteralfa-hack.blogspot.cl exploit third-party-advisory