CVE-2017-6031CWE-644

A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0

published May 6, 2017

CVSS
—
EPSS
3%
Percentile
86.0
In the wild
Unconfirmed
What it is

A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. An "improper neutralization of HTTP headers for scripting syntax" issue has been identified, which may allow remote code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02754 · 86.0th percentile
Weakness
CWE-644 · Improper Neutralization of HTTP Headers for Scripting Syntax
Published
2017-05-06T00:00Z
EPSS history
Timeline
  • 06 MAY 00:00Z
    A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0
    cvelistv5