CVE-2017-5164

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Input sent from a malicious client is not properly verified by the server. An attacker can execute arbitrary script code in another user's browser session (CROSS-SITE SCRIPTING).

Score

CVSS 3.0 6.1 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2017-02-13

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Universal Multifunctional Electric Power Quality Meter Firmware (Binom3)

References

• http://www.securityfocus.com/bid/93028
• https://ics-cert.us-cert.gov/advisories/ICSA-17-031-01A