What’s Vulnerable › Vulnerabilities

CVE-2017-14855

• Severity: high (CVSS 8.6 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-12-30 · updated 2026-06-17

Description

Red Lion HMI panels allow remote attackers to cause a denial of service (software exception) via an HTTP POST request to a long URI that does not exist, as demonstrated by version HMI 2.41 PLC 2.42.

Affected products

• Redlion Hmi Panel Firmware: 2.41

References

• http://misteralfa-hack.blogspot.cl/2017/12/red-lion-guru-mode-cve-2017-14855.html
• http://misteralfa-hack.blogspot.cl/2017/12/red-lion-guru-mode-cve-2017-14855.html

Get alerted when CVE-2017-14855 or the next vulnerability affects your stack