Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-13994 State: PUBLISHED Published: 2017-10-05T21:00:00 Last Updated: 2024-08-05T19:13:41.592Z Vendors: n/a Products: LOYTEC LVIS-3ME Problem Types: CWE-79 Description: A Cross-site Scripting issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web interface lacks proper web request validation, which could allow XSS attacks to occur if an authenticated user of the web interface is tricked into clicking a malicious link. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-257-01 - http://www.securityfocus.com/bid/100847
CVE ID: CVE-2017-13995 State: PUBLISHED Published: 2017-10-04T07:00:00 Last Updated: 2024-08-05T19:13:41.584Z Vendors: n/a Products: iniNet Solutions GmbH SCADA Webserver Problem Types: CWE-287 Description: An Improper Authentication issue was discovered in iniNet Solutions iniNet Webserver, all versions prior to V2.02.0100. The webserver does not properly authenticate users, which may allow a malicious attacker to access sensitive information such as HMI pages or modify PLC variables. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100951 - https://ics-cert.us-cert.gov/advisories/ICSA-17-264-04
CVE ID: CVE-2017-13996 State: PUBLISHED Published: 2017-10-05T21:00:00 Last Updated: 2024-08-05T19:13:41.505Z Vendors: n/a Products: LOYTEC LVIS-3ME Problem Types: CWE-23 Description: A Relative Path Traversal issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web user interface fails to prevent access to critical files that non administrative users should not have access to, which could allow an attacker to create or modify files or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-257-01 - http://www.securityfocus.com/bid/100847
CVE ID: CVE-2017-13997 State: PUBLISHED Published: 2017-10-02T05:00:00 Last Updated: 2024-08-05T19:13:41.649Z Vendors: n/a Products: Schneider Electric InduSoft Web Studio, InTouch Machine Edition Problem Types: CWE-306 Description: A Missing Authentication for Critical Function issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 or prior, and InTouch Machine Edition v8.0 SP2 or prior. InduSoft Web Studio provides the capability for an HMI client to trigger script execution on the server for the purposes of performing customized calculations or actions. A remote malicious entity could bypass the server authentication and trigger the execution of an arbitrary command. The
A remote malicious entity could bypass the server authentication and trigger the execution of an arbitrary command. The command is executed under high privileges and could lead to a complete compromise of the server. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-264-01 - http://www.securityfocus.com/bid/100952
CVE ID: CVE-2017-13998 State: PUBLISHED Published: 2017-10-05T21:00:00 Last Updated: 2024-08-05T19:13:41.639Z Vendors: n/a Products: LOYTEC LVIS-3ME Problem Types: CWE-522 Description: An Insufficiently Protected Credentials issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not sufficiently protect sensitive information from unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-257-01 - http://www.securityfocus.com/bid/100847
CVE ID: CVE-2017-13999 State: PUBLISHED Published: 2017-10-17T22:00:00 Last Updated: 2024-08-05T19:13:41.629Z Vendors: n/a Products: WECON Technology Co., Ltd. LeviStudio HMI Editor Problem Types: CWE-121 Description: A Stack-based Buffer Overflow issue was discovered in WECON LEVI Studio HMI Editor v1.8.1 and prior. Multiple stack-based buffer overflow vulnerabilities have been identified in which the application does not verify string size before copying to memory; the attacker may then be able to crash the application or run arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-285-02 - http://www.securityfocus.com
E Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-285-02 - http://www.securityfocus.com/bid/101250 - http://www.securityfocus.com/bid/102493
CVE ID: CVE-2017-14000 State: PUBLISHED Published: 2017-10-04T07:00:00 Last Updated: 2024-08-05T19:13:41.648Z Vendors: n/a Products: Ctek, Inc. SkyRouter Problem Types: CWE-287 Description: An Improper Authentication issue was discovered in Ctek SkyRouter Series 4200 and 4400, all versions prior to V6.00.11. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access the application without authenticating. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100953 - https://ics-cert.us-cert.gov/advisories/ICSA-17-264-02
CVE ID: CVE-2017-14001 State: PUBLISHED Published: 2017-09-26T02:00:00 Last Updated: 2024-08-05T19:13:41.736Z Vendors: n/a Products: Digium Asterisk GUI Problem Types: CWE-78 Description: An Improper Neutralization of Special Elements used in an OS Command issue was discovered in Digium Asterisk GUI 2.1.0 and prior. An OS command injection vulnerability has been identified that may allow the execution of arbitrary code on the system through the inclusion of OS commands in the URL request of the program. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-264-03 - http://www.securityfocus.com/bid/100950
CVE ID: CVE-2017-14002 State: PUBLISHED Published: 2018-03-20T16:00:00Z Last Updated: 2024-09-17T02:52:52.873Z Vendors: GE Healthcare Products: GE Infinia Problem Types: CWE-287 Description: GE Infinia/Infinia with Hawkeye 4 medical imaging systems all current versions are affected these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103405 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02
CVE ID: CVE-2017-14003 State: PUBLISHED Published: 2017-10-11T19:00:00 Last Updated: 2024-08-05T19:13:41.639Z Vendors: n/a Products: LAVA Computer MFG Inc. Ether-Serial Link Problem Types: CWE-290 Description: An Authentication Bypass by Spoofing issue was discovered in LAVA Ether-Serial Link (ESL) running firmware versions 6.01.00/29.03.2007 and prior versions. An improper authentication vulnerability has been identified, which, if exploited, would allow an attacker with the same IP address to bypass authentication by accessing a specific uniform resource locator. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-283-01 - http:/
al Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-283-01 - http://www.securityfocus.com/bid/101226
CVE ID: CVE-2017-14004 State: PUBLISHED Published: 2018-03-20T16:00:00Z Last Updated: 2024-09-16T17:27:58.161Z Vendors: GE Healthcare Products: GE GEMNet License server aka. (EchoServer) Problem Types: CWE-287 Description: GE GEMNet License server (EchoServer) all current versions are affected these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02
CVE ID: CVE-2017-14005 State: PUBLISHED Published: 2017-10-17T22:00:00 Last Updated: 2024-08-05T19:13:41.690Z Vendors: n/a Products: ProMinent MultiFLEX M10a Controller Problem Types: CWE-620 Description: An Unverified Password Change issue was discovered in ProMinent MultiFLEX M10a Controller web interface. When setting a new password for a user, the application does not require the user to know the original password. An attacker who is authenticated could change a user's password, enabling future access and possible configuration changes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101259 - https://ics-cert.us-cert.gov/advisories/ICSA-1
rogram Container: References: - http://www.securityfocus.com/bid/101259 - https://ics-cert.us-cert.gov/advisories/ICSA-17-285-01
CVE ID: CVE-2017-14006 State: PUBLISHED Published: 2018-03-20T16:00:00Z Last Updated: 2024-09-16T23:20:54.531Z Vendors: GE Healthcare Products: GE Xeleris Problem Types: CWE-287 Description: GE Xeleris versions 1.0,1.1,2.1,3.0,3.1, medical imaging systems, all current versions are affected, these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02
CVE ID: CVE-2017-14007 State: PUBLISHED Published: 2017-10-17T22:00:00 Last Updated: 2024-08-05T19:13:41.620Z Vendors: n/a Products: ProMinent MultiFLEX M10a Controller Problem Types: CWE-613 Description: An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The user's session is available for an extended period beyond the last activity, allowing an attacker to reuse an old session for authorization. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101259 - https://ics-cert.us-cert.gov/advisories/ICSA-17-285-01
CVE ID: CVE-2017-14008 State: PUBLISHED Published: 2018-03-20T16:00:00Z Last Updated: 2024-09-16T17:43:31.891Z Vendors: GE Healthcare Products: GE Centricity PACS RA1000 Problem Types: CWE-287 Description: GE Centricity PACS RA1000, diagnostic image analysis, all current versions are affected these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103400 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02
CVE ID: CVE-2017-14009 State: PUBLISHED Published: 2017-10-17T22:00:00 Last Updated: 2024-08-05T19:13:41.829Z Vendors: n/a Products: ProMinent MultiFLEX M10a Controller Problem Types: CWE-200 Description: An Information Exposure issue was discovered in ProMinent MultiFLEX M10a Controller web interface. When an authenticated user uses the Change Password feature on the application, the current password for the user is specified in plaintext. This may allow an attacker who has been authenticated to gain access to the password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101259 - https://ics-cert.us-cert.gov/advisories/ICSA-17-285-01
CVE ID: CVE-2017-14010 State: PUBLISHED Published: 2018-04-26T19:00:00Z Last Updated: 2024-09-16T21:04:09.236Z Vendors: SpiderControl Products: MicroBrowser Problem Types: CWE-427 Description: In SpiderControl MicroBrowser Windows XP, Vista 7, 8 and 10, Versions 1.6.30.144 and prior, an uncontrolled search path element vulnerability has been identified which could be exploited by placing a specially crafted DLL file in the search path. If the malicious DLL is loaded prior to the valid DLL, an attacker could execute arbitrary code on the system. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-292-01 - http://spidercontrol.net/do
VE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-292-01 - http://spidercontrol.net/download/downloadarea/?lang=en - http://www.securityfocus.com/bid/101505
CVE ID: CVE-2017-14011 State: PUBLISHED Published: 2017-10-17T22:00:00 Last Updated: 2024-08-05T19:13:41.660Z Vendors: n/a Products: ProMinent MultiFLEX M10a Controller Problem Types: CWE-352 Description: A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The application does not sufficiently verify requests, making it susceptible to cross-site request forgery. This may allow an attacker to execute unauthorized code, resulting in changes to the configuration of the device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101259 - https://ics-cert.us-cert.gov/advisories/ICSA-17-285-01
CVE ID: CVE-2017-14012 State: PUBLISHED Published: 2018-05-01T18:00:00Z Last Updated: 2024-09-16T22:52:09.597Z Vendors: Boston Scientific Products: ZOOM LATITUDE PRM Problem Types: CWE-311 Description: Boston Scientific ZOOM LATITUDE PRM Model 3120 does not encrypt PHI at rest. CVSS v3 base score: 4.6; CVSS vector string: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101510 - https://ics-cert.us-cert.gov/advisories/ICSMA-17-292-01
CVE ID: CVE-2017-14013 State: PUBLISHED Published: 2017-10-17T22:00:00 Last Updated: 2024-08-05T19:13:41.890Z Vendors: n/a Products: ProMinent MultiFLEX M10a Controller Problem Types: CWE-602 Description: A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The log out function in the application removes the user's session only on the client side. This may allow an attacker to bypass protection mechanisms, gain privileges, or assume the identity of an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101259 - https://ics-cert.us-cert.gov/advisories/ICSA-
Program Container: References: - http://www.securityfocus.com/bid/101259 - https://ics-cert.us-cert.gov/advisories/ICSA-17-285-01
CVE ID: CVE-2017-14014 State: PUBLISHED Published: 2018-05-01T18:00:00Z Last Updated: 2024-09-16T17:14:16.260Z Vendors: Boston Scientific Products: ZOOM LATITUDE PRM Problem Types: CWE-321 Description: Boston Scientific ZOOM LATITUDE PRM Model 3120 uses a hard-coded cryptographic key to encrypt PHI prior to having it transferred to removable media. CVSS v3 base score: 4.6; CVSS vector string: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101510 - https://ics-cert.us-cert.gov/advisories/ICSMA-17-292-01
CVE ID: CVE-2017-14016 State: PUBLISHED Published: 2017-11-06T22:00:00 Last Updated: 2024-08-05T19:13:41.637Z Vendors: n/a Products: Advantech WebAccess Problem Types: CWE-121 Description: A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. The application lacks proper validation of the length of user-supplied data prior to copying it to a stack-based buffer, which could allow an attacker to execute arbitrary code under the context of the process. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43340/ - http://www.securityfocus.com/bid/101685 - https://ics-cert.us-cert.gov/advisories/I
www.exploit-db.com/exploits/43340/ - http://www.securityfocus.com/bid/101685 - https://ics-cert.us-cert.gov/advisories/ICSA-17-306-02
CVE ID: CVE-2017-14017 State: PUBLISHED Published: 2017-10-19T23:00:00 Last Updated: 2024-08-05T19:13:41.696Z Vendors: n/a Products: Progea Movicon SCADA/HMI Problem Types: CWE-427 Description: An Uncontrolled Search Path Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An uncontrolled search path element vulnerability has been identified, which may allow a remote attacker without privileges to execute arbitrary code in the form of a malicious DLL file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101483 - https://ics-cert.us-cert.gov/advisories/ICSA-17-290-01
CVE ID: CVE-2017-14018 State: PUBLISHED Published: 2017-12-05T23:00:00 Last Updated: 2024-08-05T19:13:41.676Z Vendors: n/a Products: Ethicon Endo-Surgery Generator G11 Problem Types: CWE-287 Description: An improper authentication issue was discovered in Johnson & Johnson Ethicon Endo-Surgery Generator Gen11, all versions released before November 29, 2017. The security authentication mechanism used between the Ethicon Endo-Surgery Generator Gen11 and single-patient use products can be bypassed, allowing for unauthorized devices to be connected to the generator, which could result in a loss of integrity or availability. Additional Analyst Notes: - CVE Program Container: References: - http://w
result in a loss of integrity or availability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101978 - https://ics-cert.us-cert.gov/advisories/ICSMA-17-332-01
CVE ID: CVE-2017-14019 State: PUBLISHED Published: 2017-10-19T23:00:00 Last Updated: 2024-08-05T19:13:41.696Z Vendors: n/a Products: Progea Movicon SCADA/HMI Problem Types: CWE-428 Description: An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An unquoted search path or element vulnerability has been identified, which may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate his or her privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101483 - https://ics-cert.us-cert.gov/advisories/ICSA-17-290-01
CVE ID: CVE-2017-14020 State: PUBLISHED Published: 2017-11-13T20:00:00Z Last Updated: 2024-09-17T02:16:03.522Z Vendors: AutomationDirect Products: CLICK Programming Software (Part Number C0-PGMSW), C-More Programming Software (Part Number EA9-PGMSW), C-More Micro (Part Number EA-PGMSW), Do-more Designer Software (Part Number DM-PGMSW), GS Drives Configuration Software (Part Number GSOFT), SL-SOFT SOLO Temperature Controller Configuration Software (Part Number SL-SOFT), DirectSOFT Programming Software Problem Types: CWE-427 Description: In AutomationDirect CLICK Programming Software (Part Number C0-PGMSW) Versions 2.10 and prior; C-More Programming Software (Part Number EA9-PGMSW) Versions 6.
Software (Part Number C0-PGMSW) Versions 2.10 and prior; C-More Programming Software (Part Number EA9-PGMSW) Versions 6.30 and prior; C-More Micro (Part Number EA-PGMSW) Versions 4.20.01.0 and prior; Do-more Designer Software (Part Number DM-PGMSW) Versions 2.0.3 and prior; GS Drives Configuration Software (Part Number GSOFT) Versions 4.0.6 and prior; SL-SOFT SOLO Temperature Controller Configuration Software (Part Number SL-SOFT) Versions 1.1.0.5 and prior; and DirectSOFT Programming Software Versions 6.1 and prior, an uncontrolled search path element (DLL Hijacking) vulnerability has been identified. To exploit this vulnerability, an attacker could rename a malicious DLL to meet the criter
rability has been identified. To exploit this vulnerability, an attacker could rename a malicious DLL to meet the criteria of the application, and the application would not verify that the DLL is correct. Once loaded by the application, the DLL could run malicious code at the privilege level of the application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101780 - https://ics-cert.us-cert.gov/advisories/ICSA-17-313-01
CVE ID: CVE-2017-14021 State: PUBLISHED Published: 2017-11-01T02:00:00 Last Updated: 2024-08-05T19:13:41.597Z Vendors: n/a Products: Korenix JetNet Problem Types: CWE-321 Description: A Use of Hard-coded Cryptographic Key issue was discovered in Korenix JetNet JetNet5018G version 1.4, JetNet5310G version 1.4a, JetNet5428G-2G-2FX version 1.4, JetNet5628G-R version 1.4, JetNet5628G version 1.4, JetNet5728G-24P version 1.4, JetNet5828G version 1.1d, JetNet6710G-HVDC version 1.1e, and JetNet6710G version 1.1. An attacker may gain access to hard-coded certificates and private keys allowing the attacker to perform man-in-the-middle attacks. Additional Analyst Notes: - CVE Program Container: Refere
ys allowing the attacker to perform man-in-the-middle attacks. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-299-01 - http://www.securityfocus.com/bid/101598
CVE ID: CVE-2017-14022 State: PUBLISHED Published: 2017-12-23T00:00:00 Last Updated: 2024-08-05T19:13:41.875Z Vendors: n/a Products: Rockwell Automation FactoryTalk Alarms and Events Problem Types: CWE-20 Description: An Improper Input Validation issue was discovered in Rockwell Automation FactoryTalk Alarms and Events, Version 2.90 and earlier. An unauthenticated attacker with remote access to a network with FactoryTalk Alarms and Events can send a specially crafted set of packets packet to Port 403/TCP (the history archiver service), causing the service to either stall or terminate. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICS
terminate. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-341-02 - http://www.securityfocus.com/bid/102114
CVE ID: CVE-2017-14023 State: PUBLISHED Published: 2017-11-06T22:00:00 Last Updated: 2024-08-05T19:13:41.630Z Vendors: n/a Products: Siemens SIMATIC PCS 7 Problem Types: CWE-20 Description: An Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1 with WinCC V7.3 Upd 13, and V8.2 all versions. The improper input validation vulnerability has been identified, which may allow an authenticated remote attacker who is a member of the administrators group to crash services by sending specially crafted messages to the DCOM interface. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-306-01 - http:/
al Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-306-01 - http://www.securitytracker.com/id/1039729 - http://www.securityfocus.com/bid/101680
CVE ID: CVE-2017-14024 State: PUBLISHED Published: 2017-11-13T20:00:00 Last Updated: 2024-08-05T19:13:41.467Z Vendors: n/a Products: Schneider Electric InduSoft Web Studio and InTouch Machine Edition Problem Types: Stack-based Buffer Overflow Description: A Stack-based Buffer Overflow issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 Patch 1 and prior versions, and InTouch Machine Edition v8.0 SP2 Patch 1 and prior versions. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution with high privileges. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-313-02 -
ditional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-313-02 - http://www.securityfocus.com/bid/101779
CVE ID: CVE-2017-14025 State: PUBLISHED Published: 2017-11-06T22:00:00 Last Updated: 2024-08-05T19:13:41.509Z Vendors: n/a Products: ABB FOX515T Problem Types: CWE-20 Description: An Improper Input Validation issue was discovered in ABB FOX515T release 1.0. An improper input validation vulnerability has been identified, allowing a local attacker to provide a malicious parameter to the script that is not validated by the application, This could enable the attacker to retrieve any file on the server. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-304-01 - http://www.securityfocus.com/bid/101662
CVE ID: CVE-2017-14026 State: PUBLISHED Published: 2018-09-06T19:00:00Z Last Updated: 2024-09-16T23:55:57.237Z Vendors: Ice Qube Products: Thermal Management Center Problem Types: CWE-287 Description: In Ice Qube Thermal Management Center versions prior to version 4.13, the web application does not properly authenticate users which may allow an attacker to gain access to sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-249-01 - http://www.securityfocus.com/bid/105303