CVEvulnerability

CVE-2016-9358

9.8 CRITICAL Published 2017-06-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-06-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-259, CWE-798

Description

A Hard-Coded Passwords issue was discovered in Marel Food Processing Systems M3000 terminal associated with the following systems: A320, A325, A371, A520 Master, A520 Slave, A530, A542, A571, Check Bin Grader, FlowlineQC T376, IPM3 Dual Cam v132, IPM3 Dual Cam v139, IPM3 Single Cam v132, P520, P574, SensorX13 QC flow line, SensorX23 QC Master, SensorX23 QC Slave, Speed Batcher, T374, T377, V36, V36B, and V36C; M3210 terminal associated with the same systems as the M3000 terminal identified above; M3000 desktop software associated with the same systems as the M3000 terminal identified above; MAC4 controller associated with the same systems as the M3000 terminal identified above; SensorX23 X-ray machine; SensorX25 X-ray machine; and MWS2 weighing system. The end user does not have the ability to change system passwords.

Affected configurations

• marel a320 firmware • marel a325 firmware • marel a371 firmware • marel a520 master firmware • marel a520 slave firmware • marel a530 firmware • marel a542 firmware • marel a571 firmware • marel check bin grader firmware • marel flowlineqc t376 firmware • marel ipm3 dual cam firmware 132 • marel ipm3 dual cam firmware 139 • marel p520 firmware • marel p574 firmware • marel sensorx13 qc flow line firmware • marel sensorx23 qc master firmware • marel sensorx23 qc slave firmware • marel speed batcher firmware • marel t374 firmware • marel t377 firmware • marel v36 firmware • marel v36b firmware • marel v36c firmware

Related

Weakness · CWE (2)

  • CWE-259 Use of Hard-coded Password weakness
  • CWE-798 Use of Hard-coded Credentials weakness

References