CVE-2017-5166 Information disclosure in BINOM3 Electric Power Quality Meter
An information exposure flaw in the BINOM3 power meter allows attackers to gain privileged access to the device.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-5166?
CVE-2017-5166 is a critical vulnerability in BINOM3 Electric Power Quality Meter, published on 13 Feb 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. An INFORMATION EXPOSURE flaw can be used to gain privileged access to the device.
Weakness: CWE-200
Which versions are affected by CVE-2017-5166?
It affects 1 product.
Products include Binom3 Universal Multifunctional Electric Power Quality Meter Firmware.
How do I fix CVE-2017-5166?
No fix has been published for CVE-2017-5166 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-5166 being exploited?
There is no known exploitation of CVE-2017-5166 in the wild and no public exploit code.
Other vulnerabilities in BINOM3 Electric Power Quality Meter
- CVE-2017-5162 Missing authorization in BINOM3 Electric Power Quality Meter
- CVE-2017-5167 Hardcoded credentials in BINOM3 Electric Power Quality Meter
- CVE-2017-5165 Cross-site request forgery in BINOM3 Electric Power Quality Meter
- CVE-2017-5164 Cross-site scripting in BINOM3 Electric Power Quality Meter
Sources
Also known as GHSA-6wcp-m3mg-2q3f.