CVE-2017-14026 Auth bypass in Thermal Management Center
An attacker can access sensitive information in Ice Qube Thermal Management Center due to improper user authentication.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-14026?
CVE-2017-14026 is a high-severity authentication bypass vulnerability in Ice Qube Thermal Management Center, published on 6 Sep 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In Ice Qube Thermal Management Center versions prior to version 4.13, the web application does not properly authenticate users which may allow an attacker to gain access to sensitive information.
Weakness: CWE-287
Which versions are affected by CVE-2017-14026?
It affects 1 product.
Products include Iceqube Thermal Management Center Firmware.
How do I fix CVE-2017-14026?
No fix has been published for CVE-2017-14026 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2017-14026 being exploited?
There is no known exploitation of CVE-2017-14026 in the wild and no public exploit code.
Other vulnerabilities in Ice Qube Thermal Management Center
Sources
Also known as GHSA-w63c-wgfv-5q2m.