CVEvulnerability

CVE-2017-7909

9.8 CRITICAL Published 2017-05-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-05-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-287, CWE-603

Description

A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx MESR901 firmware versions 1.5.2 and prior. The web interface uses JavaScript to check client authentication and redirect unauthorized users. Attackers may intercept requests and bypass authentication to access restricted web pages.

Affected configurations

• advantech b\+b smartworx mesr901 firmware (<= 1.5.2)

Related

Weakness · CWE (2)

  • CWE-287 Improper Authentication weakness
  • CWE-603 Use of Client-Side Authentication weakness

References