CVE Catalog

CVE-2017-5144

Critical
Published: Translated: NVD NIST

Summary

An access control flaw was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05 and VMU-C PV prior to firmware Version A17, allowing access to most application functions without authentication.

Risk Assessment

The lack of proper access control may lead to unauthorized access to device functions, posing a risk to system security.

Recommendation

It is recommended to update the firmware to the latest version to mitigate the access control vulnerability.

Original NVD description (English source)

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. The access control flaw allows access to most application functions without authentication.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS