CVE-2017-9625 An Improper Authentication issue was discovered in Envitech EnviDAS Ultimate Versions prior to v1.0.0.5. The web application lacks proper authentication which could allow an attacker to view informati...
HighCVSS 8.2
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An Improper Authentication issue was discovered in Envitech EnviDAS Ultimate Versions prior to v1.0.0.5. The web application lacks proper authentication which could allow an attacker to view information and modify settings or execute code remotely.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| envitech envidas ultimate | <= 1.0.0.4 | No fix listed |
References
- 101249 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource vdb-entry