CVE-2017-5144
CriticalSummary
An access control flaw was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05 and VMU-C PV prior to firmware Version A17, allowing access to most application functions without authentication.
Risk Assessment
The lack of proper access control may lead to unauthorized access to device functions, posing a risk to system security.
Recommendation
It is recommended to update the firmware to the latest version to mitigate the access control vulnerability.
Other vulnerabilities in Carlo Gavazzi VMU-C EM, Carlo Gavazzi VMU-C PV
See all- CVE-2017-5146High
An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17, related to the storage of sensitive information in clear-text.
- CVE-2017-5145Critical
An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. Successful exploitation of this CROSS-SITE REQUEST FORGERY (CSRF) vulnerability can allow execution of unauthorized actions on the device such as configuration parameter changes, and saving modified configuration.
Original NVD description (English source)
An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. The access control flaw allows access to most application functions without authentication.