PT-2017-16340
CVE-2017-5144
·
Published
2017-02-13
·
Updated
2019-10-03
Description by
CVSS 2.0
7.5
HighMetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Carlo Gavazzi VMU-C EM versions prior to A11 U05
Carlo Gavazzi VMU-C PV versions prior to A17
Description
An issue was discovered that allows access to most application functions without authentication due to an access control flaw.
Recommendations
For Carlo Gavazzi VMU-C EM versions prior to A11 U05, update to firmware Version A11 U05 or later.
For Carlo Gavazzi VMU-C PV versions prior to A17, update to firmware Version A17 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾