CVE-2017-7909
Critical
Description
A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx MESR901 firmware versions 1.5.2 and prior. The web interface uses JavaScript to check client authentication and redirect unauthorized users. Attackers may intercept requests and bypass authentication to access restricted web pages.
SeverityCritical
CVSS9.8
Exploit probability—
ProductAdvantech B\+b Smartworx Mesr901 Firmware
PublishedMay 6, 2017
First seenMay 6, 2017
Weakness typeCWE-603CWE-603
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| advantech_b\+b_smartworx mesr901_firmware | v ≤ 1.5.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.