CVE-2017-9664

In ABB SREA-01 revisions A, B, C: application versions up to 3.31.5, and SREA-50 revision A: application versions up to 3.32.8, an attacker may access internal files of ABB SREA-01 and SREA-50 legacy remote monitoring tools without any authorization over the network using a HTTP request which refers to files using ../../ relative paths. Once the internal password file is retrieved, the password hash can be identified using a brute force attack. There is also an exploit allowing running of commands after authorization.

Score

CVSS 3.0 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-05-24

Last modified

2024-09-16

Weaknesses

CWE-22, CWE-23

Affected products

• Srea-01 Firmware (Abb)
• Srea-50 Firmware (Abb)
• Abb Srea-01 And Srea-50 (Ics-cert)

References

• http://www.securityfocus.com/bid/100260
• https://ics-cert.us-cert.gov/advisories/ICSA-17-222-05