CVE-2017-5167 Hardcoded credentials in BINOM3 Electric Power Quality Meter
Users cannot change their own passwords, potentially allowing unauthorized access if default credentials are known or shared.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-5167?
CVE-2017-5167 is a high-severity vulnerability in BINOM3 Electric Power Quality Meter, published on 13 Feb 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Users do not have any option to change their own passwords.
Weakness: CWE-798
Which versions are affected by CVE-2017-5167?
It affects 1 product.
Products include Binom3 Universal Multifunctional Electric Power Quality Meter Firmware.
How do I fix CVE-2017-5167?
No fix has been published for CVE-2017-5167 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-5167 being exploited?
There is no known exploitation of CVE-2017-5167 in the wild and no public exploit code.
Other vulnerabilities in BINOM3 Electric Power Quality Meter
- CVE-2017-5162 Missing authorization in BINOM3 Electric Power Quality Meter
- CVE-2017-5166 Information disclosure in BINOM3 Electric Power Quality Meter
- CVE-2017-5165 Cross-site request forgery in BINOM3 Electric Power Quality Meter
- CVE-2017-5164 Cross-site scripting in BINOM3 Electric Power Quality Meter
Sources
Also known as GHSA-6wf4-j55m-xjm6.