CVE-2017-5164 An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Input sent from a malicious client is not properly verified by the server. An attacker can execute arbitrary s...
MediumCVSS 6.1
EPSS 0.83%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Input sent from a malicious client is not properly verified by the server. An attacker can execute arbitrary script code in another user's browser session (CROSS-SITE SCRIPTING).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| binom3 universal multifunctional electric power quality meter firmware | All versions | No fix listed |
References
- 93028 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource