CVE-2017-9625

An Improper Authentication issue was discovered in Envitech EnviDAS Ultimate Versions prior to v1.0.0.5. The web application lacks proper authentication which could allow an attacker to view information and modify settings or execute code remotely.

Score

CVSS 3.0 8.2 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2017-10-17

Last modified

2024-08-05

Weaknesses

CWE-287

Affected products

• Envidas Ultimate (Envitech)

References

• http://www.securityfocus.com/bid/101249
• https://ics-cert.us-cert.gov/advisories/ICSA-17-285-03