What’s Vulnerable › Vulnerabilities

CVE-2017-11165

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 63.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-07-12 · updated 2026-06-17
• Weakness: CWE-200

Description

dataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credential and configuration information via a direct request for the /services/getFile.cmd?userfile=config.xml URI.

Affected products

• Thermofisher Dt80 Dex Firmware: 1.50.012

References

• https://packetstormsecurity.com/files/143328/DataTaker-DT80-dEX-1.50.012-Sensitive-Configuration-Exposure.html
• https://www.exploit-db.com/exploits/42313/
• https://packetstormsecurity.com/files/143328/DataTaker-DT80-dEX-1.50.012-Sensitive-Configuration-Exposure.html
• https://www.exploit-db.com/exploits/42313/

Get alerted when CVE-2017-11165 or the next vulnerability affects your stack