CVE-2017-17759

Critical

Published: 19/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of service by deleting the configuration via a wc.dll?wwMaint~EditConfig request, which reaches an older version of a West Wind Web Connection HTTP service.

Risk Assessment

Attackers can exploit this vulnerability to gain access to sensitive data or disrupt system operations, potentially leading to serious consequences for the organization.

Recommendation

It is recommended to update to the latest version of Conarc iChannel and implement appropriate security measures to minimize the risk of attacks.

Original NVD description (English source)

Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of service (by deleting the configuration) via a wc.dll?wwMaint~EditConfig request (which reaches an older version of a West Wind Web Connection HTTP service).