https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:57:49.629846+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-01597 cnvd-2017-01597 2026-10-03T08:57:49.694076+00:00 cnvd-2017-01597 https://cve.radiocsirt.org/vuln/euvd-2026-73200 EUVD-2026-73200 2026-10-03T08:57:49.694112+00:00 EUVD-2026-73200 https://cve.radiocsirt.org/vuln/fkie_cve-2017-5164 fkie_cve-2017-5164 2026-10-03T08:57:49.694127+00:00

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Input sent from a malicious client is not properly verified by the server. An attacker can execute arbitrary script code in another user's browser session (CROSS-SITE SCRIPTING).

 https://cve.radiocsirt.org/vuln/ghsa-4gm6-cxhp-6qhq GHSA-4gm6-cxhp-6qhq 2026-10-03T08:57:49.694157+00:00

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Input sent from a malicious client is not properly verified by the server. An attacker can execute arbitrary script code in another user's browser session (CROSS-SITE SCRIPTING).

 https://cve.radiocsirt.org/vuln/gsd-2017-5164 gsd-2017-5164 2026-10-03T08:57:49.694174+00:00 gsd-2017-5164 https://cve.radiocsirt.org/vuln/icsa-17-031-01a ICSA-17-031-01A — BINOM3 Electric Power Quality Meter (Update A) 2026-10-03T08:57:49.694184+00:00

Input sent from a malicious client is not properly verified by the server. An attacker can execute arbitrary script code in another user 's browser session.CVE-2017-5164 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H). Lack of authentication for remote service gives access to application set up and configuration.CVE-2017-5162 has been assigned to this vulnerability. A CVSS v3 base score of 10 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). There is no CSRF Token generated per page and/or per (sensitive) function. Successful exploitation of this vulnerability can allow silent execution of unauthorized actions on the device such as configuration parameter changes, and saving modified configuration.CVE-2017-5165 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H). This flaw can be used to gain privileged access to the device.CVE-2017-5166 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Users do not have any option to change their own passwords.CVE-2017-5167 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L).