# CVEs published 2017-05-06

11 CVEs were published on May 6, 2017: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2017-6024](https://cve.now/CVE-2017-6024.md): A Resource Exhaustion issue was discovered in Rockwell Automation ControlLogix 5580 controllers V28.011, V28.012, and V28.013; ControlLogix (no CVSS, Rockwell Automation ControlLogix 5580 and CompactLogix)
- [CVE-2017-6029](https://cve.now/CVE-2017-6029.md): A Cross-Site Scripting issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. (no CVSS, Certec EDV GmbH atvise scada)
- [CVE-2017-6031](https://cve.now/CVE-2017-6031.md): A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. (no CVSS, Certec EDV GmbH atvise scada)
- [CVE-2017-7909](https://cve.now/CVE-2017-7909.md): A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx MESR901 firmware versions 1.5.2 and prior. (no CVSS, Advantech B+B SmartWorx MESR901)
- [CVE-2017-7911](https://cve.now/CVE-2017-7911.md): A Code Injection issue was discovered in CyberVision Kaa IoT Platform, Version 0.7.4. (no CVSS, CyberVision Kaa IoT Platform)
- [CVE-2017-7921](https://cve.now/CVE-2017-7921.md): An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I (CVSS 9.8, KEV, Hikvision Cameras)
- [CVE-2017-7923](https://cve.now/CVE-2017-7923.md): A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2x (no CVSS, Hikvision Cameras)
- [CVE-2017-7925](https://cve.now/CVE-2017-7925.md): A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-I (no CVSS, Dahua Technology Co., Ltd Digital Video Recorders and IP Ca…)
- [CVE-2017-7927](https://cve.now/CVE-2017-7927.md): A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC- (no CVSS, Dahua Technology Co., Ltd Digital Video Recorders and IP Ca…)
- [CVE-2017-7929](https://cve.now/CVE-2017-7929.md): An Absolute Path Traversal issue was discovered in Advantech WebAccess Version 8.1 and prior. (no CVSS, Advantech WebAccess)
- [CVE-2017-8391](https://cve.now/CVE-2017-8391.md): The OS Installation Management component in CA Client Automation r12.9, r14.0, and r14.0 SP1 places an encrypted password into a readable lo (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-05-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.