# Vulnerabilities published in 2017 - [CVE-2017-14023](https://insights.sbomify.com/CVE-2017-14023/): Denial of service in Siemens SIMATIC PCS 7 (medium 4.9) - [CVE-2017-14022](https://insights.sbomify.com/CVE-2017-14022/): Denial of service in Rockwell Automation FactoryTalk Alarms and Events (high 7.5) - [CVE-2017-14021](https://insights.sbomify.com/CVE-2017-14021/): Hardcoded credentials in Korenix JetNet (critical 9.8) - [CVE-2017-14020](https://insights.sbomify.com/CVE-2017-14020/): Other in C-More Micro (Part Number EA-PGMSW) (high 7.8) - [CVE-2017-14019](https://insights.sbomify.com/CVE-2017-14019/): Privilege escalation in Progea Movicon SCADA/HMI (medium 6.7) - [CVE-2017-14018](https://insights.sbomify.com/CVE-2017-14018/): Auth bypass in Ethicon Endo-Surgery Generator G11 (medium 4.8) - [CVE-2017-14017](https://insights.sbomify.com/CVE-2017-14017/): Other in Progea Movicon SCADA/HMI (high 7.8) - [CVE-2017-14016](https://insights.sbomify.com/CVE-2017-14016/): Memory corruption in Advantech WebAccess (medium 6.3) - [CVE-2017-14014](https://insights.sbomify.com/CVE-2017-14014/): Hardcoded credentials in ZOOM LATITUDE PRM (medium 4.6) - [CVE-2017-14013](https://insights.sbomify.com/CVE-2017-14013/): Auth bypass in ProMinent MultiFLEX M10a Controller (medium 5.6) - [CVE-2017-14012](https://insights.sbomify.com/CVE-2017-14012/): Information disclosure in ZOOM LATITUDE PRM (medium 4.6) - [CVE-2017-14011](https://insights.sbomify.com/CVE-2017-14011/): Cross-site request forgery in ProMinent MultiFLEX M10a Controller (high 8.8) - [CVE-2017-14010](https://insights.sbomify.com/CVE-2017-14010/): Other in MicroBrowser (high 7.8) - [CVE-2017-14009](https://insights.sbomify.com/CVE-2017-14009/): Information disclosure in ProMinent MultiFLEX M10a Controller (medium 6.5) - [CVE-2017-14008](https://insights.sbomify.com/CVE-2017-14008/): Hardcoded credentials in GE Centricity PACS RA1000 (critical 9.8) - [CVE-2017-14007](https://insights.sbomify.com/CVE-2017-14007/): Auth bypass in ProMinent MultiFLEX M10a Controller (medium 5.6) - [CVE-2017-14006](https://insights.sbomify.com/CVE-2017-14006/): Hardcoded credentials in GE Xeleris (critical 9.8) - [CVE-2017-14005](https://insights.sbomify.com/CVE-2017-14005/): Auth bypass in ProMinent MultiFLEX M10a Controller (high 8.8) - [CVE-2017-14004](https://insights.sbomify.com/CVE-2017-14004/): Hardcoded credentials in GE GEMNet License server aka. (EchoServer) (critical 9.8) - [CVE-2017-14003](https://insights.sbomify.com/CVE-2017-14003/): Auth bypass in LAVA Computer MFG Inc. Ether-Serial Link (critical 9.8) - [CVE-2017-14002](https://insights.sbomify.com/CVE-2017-14002/): Hardcoded credentials in GE Infinia (critical 9.8) - [CVE-2017-14001](https://insights.sbomify.com/CVE-2017-14001/): Command injection in Digium Asterisk GUI (high 8.8) - [CVE-2017-14000](https://insights.sbomify.com/CVE-2017-14000/): Auth bypass in Ctek, Inc. SkyRouter (critical 9.4) - [CVE-2017-13999](https://insights.sbomify.com/CVE-2017-13999/): Memory corruption in WECON Technology Co., Ltd. LeviStudio HMI Editor (critical 9.8) - [CVE-2017-13998](https://insights.sbomify.com/CVE-2017-13998/): Information disclosure in LOYTEC LVIS-3ME (high 7.5) - [CVE-2017-13997](https://insights.sbomify.com/CVE-2017-13997/): Auth bypass in Schneider Electric InduSoft Web Studio, InTouch Machine Edition (critical 9.8) - [CVE-2017-13996](https://insights.sbomify.com/CVE-2017-13996/): Path traversal in LOYTEC LVIS-3ME (high 8.8) - [CVE-2017-13995](https://insights.sbomify.com/CVE-2017-13995/): Auth bypass in iniNet Solutions GmbH SCADA Webserver (critical 10.0) - [CVE-2017-13994](https://insights.sbomify.com/CVE-2017-13994/): Cross-site scripting in LOYTEC LVIS-3ME (medium 6.1) - [CVE-2017-13993](https://insights.sbomify.com/CVE-2017-13993/): Other in i-SENS, Inc. SmartLog Diabetes Management Software (high 7.8) - [CVE-2017-13992](https://insights.sbomify.com/CVE-2017-13992/): Weak cryptography in LOYTEC LVIS-3ME (high 8.1) - [CVE-2017-13991](https://insights.sbomify.com/CVE-2017-13991/): Information disclosure in hp:arcsight enterprise security manager (medium 5.3) - [CVE-2017-13990](https://insights.sbomify.com/CVE-2017-13990/): Information disclosure in hp:arcsight enterprise security manager (medium 5.3) - [CVE-2017-13989](https://insights.sbomify.com/CVE-2017-13989/): Missing authorization in hp:arcsight enterprise security manager (high 8.1) - [CVE-2017-13988](https://insights.sbomify.com/CVE-2017-13988/): Missing authorization in hp:arcsight enterprise security manager (medium 6.5) - [CVE-2017-13987](https://insights.sbomify.com/CVE-2017-13987/): Missing authorization in hp:arcsight enterprise security manager (medium 6.5) - [CVE-2017-13986](https://insights.sbomify.com/CVE-2017-13986/): Cross-site scripting in hp:arcsight enterprise security manager (medium 6.1) - [CVE-2017-13985](https://insights.sbomify.com/CVE-2017-13985/): Path traversal in hp:bsm platform application performance management system health (medium 6.5) - [CVE-2017-13984](https://insights.sbomify.com/CVE-2017-13984/): Path traversal in hp:bsm platform application performance management system health (medium 6.5) - [CVE-2017-13983](https://insights.sbomify.com/CVE-2017-13983/): Auth bypass in hp:bsm platform application performance management system health (critical 9.8) - [CVE-2017-13982](https://insights.sbomify.com/CVE-2017-13982/): File upload in hp:bsm platform application performance management system health (high 8.8) - [CVE-2017-1398](https://insights.sbomify.com/CVE-2017-1398/): Open redirect in WebSphere Commerce Enterprise (medium 6.1) - [CVE-2017-1396](https://insights.sbomify.com/CVE-2017-1396/): Misconfiguration in Security Identity Governance and Intelligence (medium 4.2) - [CVE-2017-1395](https://insights.sbomify.com/CVE-2017-1395/): Misconfiguration in Security Identity Governance and Intelligence (medium 5.9) - [CVE-2017-13911](https://insights.sbomify.com/CVE-2017-13911/): Other in OS X, macOS (high 7.8) - [CVE-2017-13910](https://insights.sbomify.com/CVE-2017-13910/): Security feature bypass in macOS (medium 5.5) - [CVE-2017-13909](https://insights.sbomify.com/CVE-2017-13909/): Information disclosure in macOS (medium 5.5) - [CVE-2017-13908](https://insights.sbomify.com/CVE-2017-13908/): Security feature bypass in macOS (high 7.8) - [CVE-2017-13907](https://insights.sbomify.com/CVE-2017-13907/): Security feature bypass in macOS (medium 6.8) - [CVE-2017-13906](https://insights.sbomify.com/CVE-2017-13906/): Memory corruption in macOS (high 7.8) - [CVE-2017-13905](https://insights.sbomify.com/CVE-2017-13905/): Race condition in macOS (high 8.1) - [CVE-2017-13904](https://insights.sbomify.com/CVE-2017-13904/): Memory corruption in apple:iphone os (high 7.8) - [CVE-2017-13903](https://insights.sbomify.com/CVE-2017-13903/): Business logic in apple:iphone os (high 7.5) - [CVE-2017-13892](https://insights.sbomify.com/CVE-2017-13892/): Information disclosure in macOS (high 7.5) - [CVE-2017-13891](https://insights.sbomify.com/CVE-2017-13891/): Other in apple:iphone os (medium 6.5) - [CVE-2017-13890](https://insights.sbomify.com/CVE-2017-13890/): Security feature bypass in apple:mac os x (high 7.4) - [CVE-2017-13889](https://insights.sbomify.com/CVE-2017-13889/): Auth bypass in apple:mac os x (critical 9.8) - [CVE-2017-13888](https://insights.sbomify.com/CVE-2017-13888/): Memory corruption in apple:iphone os (high 7.5) - [CVE-2017-13887](https://insights.sbomify.com/CVE-2017-13887/): Business logic in apple:mac os x (high 7.5) - [CVE-2017-13886](https://insights.sbomify.com/CVE-2017-13886/): Missing authorization in apple:mac os x (medium 6.5) - [CVE-2017-13885](https://insights.sbomify.com/CVE-2017-13885/): Memory corruption in apple:icloud (high 8.8) - [CVE-2017-13884](https://insights.sbomify.com/CVE-2017-13884/): Memory corruption in apple:icloud (high 8.8) - [CVE-2017-13883](https://insights.sbomify.com/CVE-2017-13883/): Memory corruption in apple:mac os x (high 7.8) - [CVE-2017-13880](https://insights.sbomify.com/CVE-2017-13880/): Memory corruption in iOS (high 7.8) - [CVE-2017-13879](https://insights.sbomify.com/CVE-2017-13879/): Memory corruption in apple:iphone os (high 7.8) - [CVE-2017-13878](https://insights.sbomify.com/CVE-2017-13878/): Memory corruption in apple:mac os x (high 7.1) - [CVE-2017-13877](https://insights.sbomify.com/CVE-2017-13877/): Information disclosure in apple:iphone os (low 3.3) - [CVE-2017-13876](https://insights.sbomify.com/CVE-2017-13876/): Memory corruption in apple:iphone os (high 7.8) - [CVE-2017-13875](https://insights.sbomify.com/CVE-2017-13875/): Memory corruption in apple:mac os x (high 7.8) - [CVE-2017-13874](https://insights.sbomify.com/CVE-2017-13874/): Security feature bypass in apple:iphone os (high 7.5) - [CVE-2017-13873](https://insights.sbomify.com/CVE-2017-13873/): Information disclosure in apple:iphone os (medium 4.3) - [CVE-2017-13872](https://insights.sbomify.com/CVE-2017-13872/): Auth bypass in macOS High Sierra (high 8.1) - [CVE-2017-13871](https://insights.sbomify.com/CVE-2017-13871/): Security feature bypass in apple:mac os x (high 7.5) - [CVE-2017-13870](https://insights.sbomify.com/CVE-2017-13870/): Memory corruption in apple:icloud (high 8.8) - [CVE-2017-13869](https://insights.sbomify.com/CVE-2017-13869/): Information disclosure in apple:iphone os (medium 5.5) - [CVE-2017-13868](https://insights.sbomify.com/CVE-2017-13868/): Information disclosure in apple:iphone os (medium 5.5) - [CVE-2017-13867](https://insights.sbomify.com/CVE-2017-13867/): Memory corruption in apple:iphone os (high 7.8) - [CVE-2017-13866](https://insights.sbomify.com/CVE-2017-13866/): Memory corruption in apple:icloud (high 8.8) - [CVE-2017-13865](https://insights.sbomify.com/CVE-2017-13865/): Information disclosure in apple:iphone os (medium 5.5) - [CVE-2017-13864](https://insights.sbomify.com/CVE-2017-13864/): Information disclosure in apple:icloud (medium 5.9) - [CVE-2017-13863](https://insights.sbomify.com/CVE-2017-13863/): Weak cryptography in apple:iphone os (medium 5.9) - [CVE-2017-13862](https://insights.sbomify.com/CVE-2017-13862/): Memory corruption in apple:iphone os (high 7.8) - [CVE-2017-13861](https://insights.sbomify.com/CVE-2017-13861/): Memory corruption in apple:iphone os (high 7.8) - [CVE-2017-13860](https://insights.sbomify.com/CVE-2017-13860/): Weak cryptography in apple:iphone os (medium 5.9) - [CVE-2017-1386](https://insights.sbomify.com/CVE-2017-1386/): Security feature bypass in API Connect (medium 5.9) - [CVE-2017-13858](https://insights.sbomify.com/CVE-2017-13858/): Other in apple:mac os x (high 7.8) - [CVE-2017-13856](https://insights.sbomify.com/CVE-2017-13856/): Memory corruption in apple:icloud (high 8.8) - [CVE-2017-13855](https://insights.sbomify.com/CVE-2017-13855/): Memory corruption in apple:iphone os (medium 5.5) - [CVE-2017-13854](https://insights.sbomify.com/CVE-2017-13854/): Memory corruption in apple:iphone os (high 7.8) - [CVE-2017-13853](https://insights.sbomify.com/CVE-2017-13853/): Memory corruption in apple:mac os x (high 7.8) - [CVE-2017-13852](https://insights.sbomify.com/CVE-2017-13852/): Information disclosure in apple:iphone os (low 3.3) - [CVE-2017-13851](https://insights.sbomify.com/CVE-2017-13851/): Security feature bypass in apple:mac os x (medium 5.5) - [CVE-2017-13850](https://insights.sbomify.com/CVE-2017-13850/): Memory corruption in apple:mac os x (high 7.1) - [CVE-2017-13849](https://insights.sbomify.com/CVE-2017-13849/): Denial of service in apple:iphone os (medium 5.5) - [CVE-2017-13848](https://insights.sbomify.com/CVE-2017-13848/): Other in apple:mac os x (high 7.8) - [CVE-2017-13847](https://insights.sbomify.com/CVE-2017-13847/): Memory corruption in apple:iphone os (high 7.8) - [CVE-2017-13846](https://insights.sbomify.com/CVE-2017-13846/): Memory corruption in apple:mac os x (critical 9.8) - [CVE-2017-13844](https://insights.sbomify.com/CVE-2017-13844/): Security feature bypass in apple:iphone os (low 2.4) - [CVE-2017-13843](https://insights.sbomify.com/CVE-2017-13843/): Memory corruption in apple:mac os x (high 7.8) - [CVE-2017-13842](https://insights.sbomify.com/CVE-2017-13842/): Information disclosure in apple:mac os x (medium 5.5) --- From sbomify Insights: https://insights.sbomify.com/years/2017/page/105/