CVE-2017-7916

Name of the Vulnerable Software and Affected Versions ABB VSN300 WiFi Logger Card versions 1.8.15 and prior ABB VSN300 WiFi Logger Card for React versions 2.1.3 and prior

Description A Permissions, Privileges, and Access Controls issue was found in the web application, where it does not properly restrict privileges of the Guest account. This could allow a malicious user to gain access to configuration information that should be restricted.

Recommendations For ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, restrict access to the Guest account until a fix is available. For ABB VSN300 WiFi Logger Card for React versions 2.1.3 and prior, limit the privileges of the Guest account to prevent unauthorized access to configuration information.