CVE-2017-5162
CriticalSummary
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter related to lack of authentication for remote service, allowing access to application setup and configuration.
Risk Assessment
The lack of authentication may lead to unauthorized access to critical device settings, posing a risk of data manipulation and disruption of system operation.
Recommendation
It is recommended to implement authentication mechanisms for remote services and regularly update the device software to secure against unauthorized access.
Other vulnerabilities in BINOM3 Universal Multifunctional Electric Power Quality Meter
See all- CVE-2017-5167High
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter that prevents users from changing their own passwords.
- CVE-2017-5165High
An issue was discovered in the BINOM3 Universal Multifunctional Electric Power Quality Meter related to the lack of CSRF Token generation per page and/or for sensitive functions. This allows silent execution of unauthorized actions, such as configuration parameter changes.
- CVE-2017-5166Critical
An INFORMATION EXPOSURE flaw was discovered in the BINOM3 Universal Multifunctional Electric Power Quality Meter. This vulnerability can be exploited to gain privileged access to the device.
Original NVD description (English source)
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Lack of authentication for remote service gives access to application set up and configuration.