CVE-2017-5162

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter

published February 13, 2017

CVSS
—
EPSS
13%
Percentile
96.2
In the wild
Unconfirmed
What it is

⚠️ A sneaky gap in authentication means anyone could waltz right into your BINOM3 Meter settings! 🤯 Think of it like having a hotel room key that works for any room in the entire building — that’s how easy it is for an unauthorized person to access the configuration settings of your power quality meter. This vulnerability opens the door for attackers to tamper with the device's settings, potentially leading to misinformation about power quality or even malicious configurations that could impose serious risks to your electrical system. If someone decides to have fun with your meter, they could cause chaos without you even knowing!

Put simply

Think of it like having a hotel room key that works for any room in the entire building — that’s how easy it is for an unauthorized person to access the configuration settings of your power quality meter. The BINOM3 Universal Multifunctional Electric Power Quality Meter lacks proper authentication for its remote service, allowing unauthorized access to the application setup and configuration.

What to do

This vulnerability opens the door for attackers to tamper with the device's settings, potentially leading to misinformation about power quality or even malicious configurations that could impose serious risks to your electrical system. If someone decides to have fun with your meter, they could cause chaos without you even knowing! Make sure to apply any available updates from the manufacturer that address this vulnerability. If your device allows it, configure strong authentication measures to safeguard remote access. Regularly review your device’s settings to ensure they're intact. You've got this! With a few adjustments, your power quality meter can be safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12610 · 96.2th percentile
Published
2017-02-13T21:00Z
EPSS history
Timeline
  • 13 FEB 21:00Z
    An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter
    cvelistv5