CVE-2017-11349

dataTaker DT8x dEX 1.72.007 allows remote attackers to compose programs or schedules, for purposes such as sending e-mail messages or making outbound connections to FTP servers for uploading data.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@mitre.org

Published

2017-07-17

Last modified

2024-08-05

Weaknesses

CWE-522

Affected products

• Dt8x Firmware (Thermofisher)

References

• https://nullku7.github.io/stuff/exposure/industrial/2017/05/02/Thermofisher-dataTaker.html
• https://twitter.com/nullku7/status/859238295959609344