CVE-2017-5167
HighSummary
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter that prevents users from changing their own passwords.
Risk Assessment
The inability for users to change passwords poses a risk of unauthorized access to the device, potentially leading to data manipulation.
Recommendation
It is recommended to update the device's firmware to allow users to change passwords and implement additional security measures.
Other vulnerabilities in BINOM3 Universal Multifunctional Electric Power Quality Meter
See all- CVE-2017-5165High
An issue was discovered in the BINOM3 Universal Multifunctional Electric Power Quality Meter related to the lack of CSRF Token generation per page and/or for sensitive functions. This allows silent execution of unauthorized actions, such as configuration parameter changes.
- CVE-2017-5166Critical
An INFORMATION EXPOSURE flaw was discovered in the BINOM3 Universal Multifunctional Electric Power Quality Meter. This vulnerability can be exploited to gain privileged access to the device.
- CVE-2017-5162Critical
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter related to lack of authentication for remote service, allowing access to application setup and configuration.
Original NVD description (English source)
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Users do not have any option to change their own passwords.