Threat Investigation
Request a demo

CVE-2017-14728

Critical

Description

An authentication bypass was found in an unknown area of the SiteOmat source code. All SiteOmat BOS versions are affected, prior to the submission of this exploit. Also, the SiteOmat does not force administrators to switch passwords, leaving SSH and HTTP remote authentication open to public.

SeverityCritical
CVSS9.8
Exploit probability—
ProductOrpak Siteomat
PublishedJun 3, 2019
First seenJun 3, 2019
Weakness typeCWE-798Hard-coded credentials

How to fix

Update
  • orpak siteomat6.4.414.084 or later

Affected products

ProductAffected versionsFixed in
orpak siteomatv < 6.4.414.0846.4.414.084

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.