CVEvulnerability
CVE-2017-7920
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-08-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-287
Description
An Improper Authentication issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, and VSN300 WiFi Logger Card for React versions 2.1.3 and prior. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access internal information about status and connected devices without authenticating.
Affected configurations
• abb vsn300 firmware (<= 1.8.15)
• abb vsn300 for react firmware 2.1.3
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://search.abb.com/library/Download.aspx?DocumentID=9AKK107045A1977&LanguageCode=en&DocumentPartId=&Action=Launch Vendor Advisory
- http://www.securityfocus.com/bid/99558 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-192-03 Third Party Advisory, US Government Resource
- http://search.abb.com/library/Download.aspx?DocumentID=9AKK107045A1977&LanguageCode=en&DocumentPartId=&Action=Launch Vendor Advisory
- http://www.securityfocus.com/bid/99558 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-192-03 Third Party Advisory, US Government Resource