CVE-2017-7912

State: Published
Severity: Not scored
Published: Apr 8, 2019
Updated: Aug 5, 2024
Reserved: Apr 18, 2017

Description

Hanwha Techwin SRN-4000, SRN-4000 firmware versions prior to SRN4000_v2.16_170401, A specially crafted http request and response could allow an attacker to gain access to the device management page with admin privileges without proper authentication.

Scores

The record has no CVSS score.

Weaknesses

CWE-284 IMPROPER ACCESS CONTROL CWE-284

Affected Products

Product	Versions
SRN-4000Hanwha Techwin	firmware versions prior to SRN4000_v2.16_170401Affected

References

https://ics-cert.us-cert.gov/advisories/ICSA-17-136-03

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.