CVEs published May 6, 2017
11 CVEs were published on May 6, 2017: 1 critical, 0 high. 1 is now in CISA KEV.
- Published
- 11
- Critical
- 1
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 10
- Now in CISA KEV
- 1
- Fix available
- 0
Most affected products
- Certec EDV GmbH atvise scada
- 2
- Dahua Technology Co., Ltd Digital Video Recorders and IP Ca…
- 2
- Hikvision Cameras
- 2
- Advantech B+B SmartWorx MESR901
- 1
- Advantech WebAccess
- 1
- CyberVision Kaa IoT Platform
- 1
- Rockwell Automation ControlLogix 5580 and CompactLogix
- 1
Critical 1
Medium, low and unrated 10
- CVE-2017-6024A Resource Exhaustion issue was discovered in Rockwell Automation ControlLogix 5580 controllers V28.011, V28.012, and V28.013; ControlLogix Rockwell Automation ControlLogix 5580 and CompactLogix
- CVE-2017-6029A Cross-Site Scripting issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0.Certec EDV GmbH atvise scada
- CVE-2017-6031A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0.Certec EDV GmbH atvise scada
- CVE-2017-7909A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx MESR901 firmware versions 1.5.2 and prior.Advantech B+B SmartWorx MESR901
- CVE-2017-7911A Code Injection issue was discovered in CyberVision Kaa IoT Platform, Version 0.7.4.CyberVision Kaa IoT Platform
- CVE-2017-7923A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xHikvision Cameras
- CVE-2017-7925A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IDahua Technology Co., Ltd Digital Video Recorders and IP Ca…
- CVE-2017-7927A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-Dahua Technology Co., Ltd Digital Video Recorders and IP Ca…
- CVE-2017-7929An Absolute Path Traversal issue was discovered in Advantech WebAccess Version 8.1 and prior.Advantech WebAccess
- CVE-2017-8391The OS Installation Management component in CA Client Automation r12.9, r14.0, and r14.0 SP1 places an encrypted password into a readable lo