What’s Vulnerable › Vulnerabilities

CVE-2017-9625

• Severity: high (CVSS 8.2 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-10-17 · updated 2026-06-17
• Weakness: CWE-287

Description

An Improper Authentication issue was discovered in Envitech EnviDAS Ultimate Versions prior to v1.0.0.5. The web application lacks proper authentication which could allow an attacker to view information and modify settings or execute code remotely.

Affected products

• Envitech Ltd. EnviDAS Ultimate: through 1.0.0.4

References

• http://www.securityfocus.com/bid/101249
• https://ics-cert.us-cert.gov/advisories/ICSA-17-285-03
• http://www.securityfocus.com/bid/101249
• https://ics-cert.us-cert.gov/advisories/ICSA-17-285-03

Get alerted when CVE-2017-9625 or the next vulnerability affects your stack