https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:10:43 +0000 https://cve.radiocsirt.org/vuln/bdu:2017-02552 bdu:2017-02552 https://cve.radiocsirt.org/vuln/bdu:2017-02552 https://cve.radiocsirt.org/vuln/cnvd-2017-01596 cnvd-2017-01596 https://cve.radiocsirt.org/vuln/cnvd-2017-01596 https://cve.radiocsirt.org/vuln/euvd-2026-73146 EUVD-2026-73146 https://cve.radiocsirt.org/vuln/euvd-2026-73146 https://cve.radiocsirt.org/vuln/fkie_cve-2017-5162 <p>An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Lack of authentication for remote service gives access to application set up and configuration.</p> <p>An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Lack of authentication for remote service gives access to application set up and configuration.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-5162 https://cve.radiocsirt.org/vuln/ghsa-pp9f-5m8v-g2pv <p>An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Lack of authentication for remote service gives access to application set up and configuration.</p> <p>An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Lack of authentication for remote service gives access to application set up and configuration.</p> https://cve.radiocsirt.org/vuln/ghsa-pp9f-5m8v-g2pv https://cve.radiocsirt.org/vuln/gsd-2017-5162 gsd-2017-5162 https://cve.radiocsirt.org/vuln/gsd-2017-5162 https://cve.radiocsirt.org/vuln/icsa-17-031-01a <p>Input sent from a malicious client is not properly verified by the server. An attacker can execute arbitrary script code in another user &#39;s browser session.CVE-2017-5164 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H). Lack of authentication for remote service gives access to application set up and configuration.CVE-2017-5162 has been assigned to this vulnerability. A CVSS v3 base score of 10 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). There is no CSRF Token generated per page and/or per (sensitive) function. Successful exploitation of this vulnerability can allow silent execution of unauthorized actions on the device such as configuration parameter changes, and saving modified configuration.CVE-2017-5165 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H). This flaw can be used to gain privileged access to the device.CVE-2017-5166 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Users do not have any option to change their own passwords.CVE-2017-5167 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L).</p> <p>Input sent from a malicious client is not properly verified by the server. An attacker can execute arbitrary script code in another user &#39;s browser session.CVE-2017-5164 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H). Lack of authentication for remote service gives access to application set up and configuration.CVE-2017-5162 has been assigned to this vulnerability. A CVSS v3 base score of 10 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). There is no CSRF Token generated per page and/or per (sensitive) function. Successful exploitation of this vulnerability can allow silent execution of unauthorized actions on the device such as configuration parameter changes, and saving modified configuration.CVE-2017-5165 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H). This flaw can be used to gain privileged access to the device.CVE-2017-5166 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Users do not have any option to change their own passwords.CVE-2017-5167 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L).</p> https://cve.radiocsirt.org/vuln/icsa-17-031-01a