CVE-2017-14025

An Improper Input Validation issue was discovered in ABB FOX515T release 1.0. An improper input validation vulnerability has been identified, allowing a local attacker to provide a malicious parameter to the script that is not validated by the application, This could enable the attacker to retrieve any file on the server.

Score

CVSS 3.0 5.5 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2017-11-06

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Fox515t Firmware (Hitachienergy)

References

• http://www.securityfocus.com/bid/101662
• https://ics-cert.us-cert.gov/advisories/ICSA-17-304-01