CVE Catalog

CVE-2017-12733

Critical
Published: Translated: NVD NIST

Summary

A Missing Authentication for Critical Function issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, Integra 500, and iSite ATG consoles. An attacker may create an application user account to gain administrative privileges.

Risk Assessment

The lack of proper authentication may lead to unauthorized access to the system, posing a serious threat to the security of data and operations within the organization.

Recommendation

It is recommended to update the software to the latest version to mitigate this vulnerability and implement additional authentication mechanisms for critical functions.

Original NVD description (English source)

A Missing Authentication for Critical Function issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSite ATG consoles with the following software versions: older than V175, V175-V189, V191-V195, and V16Q3.1. An attacker may create an application user account to gain administrative privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS