CVE-2017-5165

HIGH

BINOM3 Universal Multifunctional Electric Power Quality Meter Firmware - Cross-Site Request Forgery

Title source: llm

Description

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. There is no CSRF Token generated per page and/or per (sensitive) function. Successful exploitation of this vulnerability can allow silent execution of unauthorized actions on the device such as configuration parameter changes, and saving modified configuration.

References (2)

Core 2

Core References

Third Party Advisory, US Government Resource x_refsource_misc

https://ics-cert.us-cert.gov/advisories/ICSA-17-031-01A

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/93028

Scores

CVSS v3 7.6

EPSS 0.0066

EPSS Percentile 47.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Details

CWE

CWE-352

Status published

Products (2)

binom3/universal_multifunctional_electric_power_quality_meter_firmware

n/a/BINOM3 Electric Power Quality Meter BINOM3 Electric Power Quality Meter

Published Feb 13, 2017

Tracked Since Feb 18, 2026