Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
4 vulnerabilities by opwglobal
CVE-2024-8310 (GCVE-0-2024-8310)
Vulnerability from nvd – Published: 2024-09-27 16:33 – Updated: 2024-09-27 19:19
VLAI
EPSS
VEX
Title
OPW Fuel Management Systems SiteSentinel Missing Authentication for Critical Function
Summary
OPW Fuel Management Systems SiteSentinel
could allow an attacker to bypass authentication to the server and obtain full admin privileges.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-27 18:45 UTC
CWE
- CWE-306 - Missing Authentication for Critical Function
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| OPW Fuel Managements Systems | SiteSentinel |
Affected:
0 , < 17Q2.1
(custom)
|
|
| opwglobal | sitesentinel_firmware |
Affected:
0 , < 17q2.1
(custom)
cpe:2.3:o:opwglobal:sitesentinel_firmware:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:opwglobal:sitesentinel_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "sitesentinel_firmware",
"vendor": "opwglobal",
"versions": [
{
"lessThan": "17q2.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-8310",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-09-27T18:45:08.451522Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-09-27T19:19:33.579Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "SiteSentinel",
"vendor": "OPW Fuel Managements Systems",
"versions": [
{
"lessThan": "17Q2.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Pedro Umbelino of Bitsight reported this vulnerability to CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "OPW Fuel Management Systems SiteSentinel \ncould allow an attacker to bypass authentication to the server and obtain full admin privileges.\n\n\u003cbr\u003e"
}
],
"value": "OPW Fuel Management Systems SiteSentinel \ncould allow an attacker to bypass authentication to the server and obtain full admin privileges."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306 Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-09-27T16:33:39.522Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-01"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eOPW Fuel Management Systems\u0027 parent company, Dover Fueling Systems \n(DFS), recommends users install all versions of the product behind a \nfirewall as primary protection.\u003c/p\u003e\n\u003cp\u003eDFS recommends user running versions prior to V17Q.2.1 upgrade to \nV17Q.2.1. Users with products that were distributed with versions newer \nthan V17Q.2.1 should contact DFS using the link below to confirm that \ntheir build has the required fixes.\u003c/p\u003e\n\u003cp\u003eThe software is available to authorized service providers for DFS products. Users should \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.doverfuelingsolutions.com/contact-us\"\u003econtact DFS\u003c/a\u003e\u003c/p\u003e service providers to have the software on their system upgraded or changed.\n\n\u003cbr\u003e"
}
],
"value": "OPW Fuel Management Systems\u0027 parent company, Dover Fueling Systems \n(DFS), recommends users install all versions of the product behind a \nfirewall as primary protection.\n\n\nDFS recommends user running versions prior to V17Q.2.1 upgrade to \nV17Q.2.1. Users with products that were distributed with versions newer \nthan V17Q.2.1 should contact DFS using the link below to confirm that \ntheir build has the required fixes.\n\n\nThe software is available to authorized service providers for DFS products. Users should contact DFS https://www.doverfuelingsolutions.com/contact-us \n\n service providers to have the software on their system upgraded or changed."
}
],
"source": {
"advisory": "ICSA-24-268-01",
"discovery": "EXTERNAL"
},
"title": "OPW Fuel Management Systems SiteSentinel Missing Authentication for Critical Function",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2024-8310",
"datePublished": "2024-09-27T16:33:39.522Z",
"dateReserved": "2024-08-29T14:29:19.568Z",
"dateUpdated": "2024-09-27T19:19:33.579Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-8310 (GCVE-0-2024-8310)
Vulnerability from cvelistv5 – Published: 2024-09-27 16:33 – Updated: 2024-09-27 19:19
VLAI
EPSS
VEX
Title
OPW Fuel Management Systems SiteSentinel Missing Authentication for Critical Function
Summary
OPW Fuel Management Systems SiteSentinel
could allow an attacker to bypass authentication to the server and obtain full admin privileges.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-27 18:45 UTC
CWE
- CWE-306 - Missing Authentication for Critical Function
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| OPW Fuel Managements Systems | SiteSentinel |
Affected:
0 , < 17Q2.1
(custom)
|
|
| opwglobal | sitesentinel_firmware |
Affected:
0 , < 17q2.1
(custom)
cpe:2.3:o:opwglobal:sitesentinel_firmware:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:opwglobal:sitesentinel_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "sitesentinel_firmware",
"vendor": "opwglobal",
"versions": [
{
"lessThan": "17q2.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-8310",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-09-27T18:45:08.451522Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-09-27T19:19:33.579Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "SiteSentinel",
"vendor": "OPW Fuel Managements Systems",
"versions": [
{
"lessThan": "17Q2.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Pedro Umbelino of Bitsight reported this vulnerability to CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "OPW Fuel Management Systems SiteSentinel \ncould allow an attacker to bypass authentication to the server and obtain full admin privileges.\n\n\u003cbr\u003e"
}
],
"value": "OPW Fuel Management Systems SiteSentinel \ncould allow an attacker to bypass authentication to the server and obtain full admin privileges."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306 Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-09-27T16:33:39.522Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-01"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eOPW Fuel Management Systems\u0027 parent company, Dover Fueling Systems \n(DFS), recommends users install all versions of the product behind a \nfirewall as primary protection.\u003c/p\u003e\n\u003cp\u003eDFS recommends user running versions prior to V17Q.2.1 upgrade to \nV17Q.2.1. Users with products that were distributed with versions newer \nthan V17Q.2.1 should contact DFS using the link below to confirm that \ntheir build has the required fixes.\u003c/p\u003e\n\u003cp\u003eThe software is available to authorized service providers for DFS products. Users should \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.doverfuelingsolutions.com/contact-us\"\u003econtact DFS\u003c/a\u003e\u003c/p\u003e service providers to have the software on their system upgraded or changed.\n\n\u003cbr\u003e"
}
],
"value": "OPW Fuel Management Systems\u0027 parent company, Dover Fueling Systems \n(DFS), recommends users install all versions of the product behind a \nfirewall as primary protection.\n\n\nDFS recommends user running versions prior to V17Q.2.1 upgrade to \nV17Q.2.1. Users with products that were distributed with versions newer \nthan V17Q.2.1 should contact DFS using the link below to confirm that \ntheir build has the required fixes.\n\n\nThe software is available to authorized service providers for DFS products. Users should contact DFS https://www.doverfuelingsolutions.com/contact-us \n\n service providers to have the software on their system upgraded or changed."
}
],
"source": {
"advisory": "ICSA-24-268-01",
"discovery": "EXTERNAL"
},
"title": "OPW Fuel Management Systems SiteSentinel Missing Authentication for Critical Function",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2024-8310",
"datePublished": "2024-09-27T16:33:39.522Z",
"dateReserved": "2024-08-29T14:29:19.568Z",
"dateUpdated": "2024-09-27T19:19:33.579Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
VAR-201709-1007
Vulnerability from variot - Updated: 2023-12-18 13:24A SQL Injection issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSite ATG consoles with the following software versions: older than V175, V175-V189, V191-V195, and V16Q3.1. The application is vulnerable to injection of malicious SQL queries via the input from the client. Multiple OPW Products are prone to an SQL-injection vulnerability and an authentication-bypass vulnerability. An attacker can exploit these issues to bypass certain security restrictions, perform unauthorized actions, modify the logic of SQL queries, compromise the software, retrieve information, or modify data; other consequences are possible as well. SQL injection vulnerabilities exist in multi-span OPWA products
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201709-1007",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "sitesentinel integra 100",
"scope": "eq",
"trust": 1.6,
"vendor": "opwglobal",
"version": "195"
},
{
"model": "sitesentinel integra 500",
"scope": "eq",
"trust": 1.6,
"vendor": "opwglobal",
"version": "189"
},
{
"model": "sitesentinel integra 100",
"scope": "eq",
"trust": 1.6,
"vendor": "opwglobal",
"version": "16q3.1"
},
{
"model": "sitesentinel integra 500",
"scope": "eq",
"trust": 1.6,
"vendor": "opwglobal",
"version": "16q3.1"
},
{
"model": "sitesentinel integra 500",
"scope": "eq",
"trust": 1.6,
"vendor": "opwglobal",
"version": "195"
},
{
"model": "sitesentinel isite atg",
"scope": "eq",
"trust": 1.6,
"vendor": "opwglobal",
"version": "195"
},
{
"model": "sitesentinel integra 500",
"scope": "eq",
"trust": 1.6,
"vendor": "opwglobal",
"version": "191"
},
{
"model": "sitesentinel integra 100",
"scope": "eq",
"trust": 1.6,
"vendor": "opwglobal",
"version": "191"
},
{
"model": "sitesentinel integra 100",
"scope": "lte",
"trust": 1.0,
"vendor": "opwglobal",
"version": "175"
},
{
"model": "sitesentinel integra 500",
"scope": "lte",
"trust": 1.0,
"vendor": "opwglobal",
"version": "175"
},
{
"model": "sitesentinel isite atg",
"scope": "eq",
"trust": 1.0,
"vendor": "opwglobal",
"version": "189"
},
{
"model": "sitesentinel isite atg",
"scope": "eq",
"trust": 1.0,
"vendor": "opwglobal",
"version": "16q3.1"
},
{
"model": "sitesentinel integra 100",
"scope": "eq",
"trust": 1.0,
"vendor": "opwglobal",
"version": "189"
},
{
"model": "sitesentinel isite atg",
"scope": "eq",
"trust": 1.0,
"vendor": "opwglobal",
"version": "191"
},
{
"model": "sitesentinel isite atg",
"scope": "lte",
"trust": 1.0,
"vendor": "opwglobal",
"version": "175"
},
{
"model": "sitesentinel integra 100",
"scope": "eq",
"trust": 0.8,
"vendor": "opw fuel management",
"version": "v16q3.1"
},
{
"model": "sitesentinel integra 100",
"scope": "lt",
"trust": 0.8,
"vendor": "opw fuel management",
"version": "v175"
},
{
"model": "sitesentinel integra 100",
"scope": "eq",
"trust": 0.8,
"vendor": "opw fuel management",
"version": "v175-v189"
},
{
"model": "sitesentinel integra 100",
"scope": "eq",
"trust": 0.8,
"vendor": "opw fuel management",
"version": "v191-v195"
},
{
"model": "sitesentinel integra 500",
"scope": "eq",
"trust": 0.8,
"vendor": "opw fuel management",
"version": "v16q3.1"
},
{
"model": "sitesentinel integra 500",
"scope": "lt",
"trust": 0.8,
"vendor": "opw fuel management",
"version": "v175"
},
{
"model": "sitesentinel integra 500",
"scope": "eq",
"trust": 0.8,
"vendor": "opw fuel management",
"version": "v175-v189"
},
{
"model": "sitesentinel integra 500",
"scope": "eq",
"trust": 0.8,
"vendor": "opw fuel management",
"version": "v191-v195"
},
{
"model": "sitesentinel isite atg",
"scope": "eq",
"trust": 0.8,
"vendor": "opw fuel management",
"version": "v16q3.1"
},
{
"model": "sitesentinel isite atg",
"scope": "lt",
"trust": 0.8,
"vendor": "opw fuel management",
"version": "v175"
},
{
"model": "sitesentinel isite atg",
"scope": "eq",
"trust": 0.8,
"vendor": "opw fuel management",
"version": "v175-v189"
},
{
"model": "sitesentinel isite atg",
"scope": "eq",
"trust": 0.8,
"vendor": "opw fuel management",
"version": "v191-v195"
},
{
"model": "fuel management systems sitesentinel isite atg",
"scope": "lt",
"trust": 0.6,
"vendor": "opw",
"version": "v175"
},
{
"model": "fuel management systems sitesentinel isite atg",
"scope": "eq",
"trust": 0.6,
"vendor": "opw",
"version": "v175-v189"
},
{
"model": "fuel management systems sitesentinel isite atg",
"scope": "eq",
"trust": 0.6,
"vendor": "opw",
"version": "v191-v195"
},
{
"model": "fuel management systems sitesentinel isite atg v16q3.1",
"scope": null,
"trust": 0.6,
"vendor": "opw",
"version": null
},
{
"model": "fuel management systems sitesentinel integra",
"scope": "eq",
"trust": 0.6,
"vendor": "opw",
"version": "100\u003cv175"
},
{
"model": "fuel management systems sitesentinel integra",
"scope": "eq",
"trust": 0.6,
"vendor": "opw",
"version": "100v175-v189"
},
{
"model": "fuel management systems sitesentinel integra",
"scope": "eq",
"trust": 0.6,
"vendor": "opw",
"version": "100v191-v195"
},
{
"model": "fuel management systems sitesentinel integra v16q3.1",
"scope": "eq",
"trust": 0.6,
"vendor": "opw",
"version": "100"
},
{
"model": "fuel management systems sitesentinel integra",
"scope": "eq",
"trust": 0.6,
"vendor": "opw",
"version": "500\u003cv175"
},
{
"model": "fuel management systems sitesentinel integra",
"scope": "eq",
"trust": 0.6,
"vendor": "opw",
"version": "500v175-v189"
},
{
"model": "fuel management systems sitesentinel integra",
"scope": "eq",
"trust": 0.6,
"vendor": "opw",
"version": "500v191-v195"
},
{
"model": "fuel management systems sitesentinel integra v16q3.1",
"scope": "eq",
"trust": 0.6,
"vendor": "opw",
"version": "500"
},
{
"model": "sitesentinel isite atg",
"scope": "eq",
"trust": 0.6,
"vendor": "opwglobal",
"version": "175"
},
{
"model": "sitesentinel integra 100",
"scope": "eq",
"trust": 0.6,
"vendor": "opwglobal",
"version": "175"
},
{
"model": "sitesentinel isite atg console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "195"
},
{
"model": "sitesentinel isite atg console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "191"
},
{
"model": "sitesentinel isite atg console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "189"
},
{
"model": "sitesentinel isite atg console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "175"
},
{
"model": "sitesentinel isite atg console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "170"
},
{
"model": "sitesentinel isite atg console 16q3.1",
"scope": null,
"trust": 0.3,
"vendor": "opw",
"version": null
},
{
"model": "sitesentinel integra console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "500195"
},
{
"model": "sitesentinel integra console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "500191"
},
{
"model": "sitesentinel integra console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "500189"
},
{
"model": "sitesentinel integra console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "500175"
},
{
"model": "sitesentinel integra console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "500170"
},
{
"model": "sitesentinel integra console 16q3.1",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "500"
},
{
"model": "sitesentinel integra console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "100195"
},
{
"model": "sitesentinel integra console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "100191"
},
{
"model": "sitesentinel integra console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "100189"
},
{
"model": "sitesentinel integra console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "100175"
},
{
"model": "sitesentinel integra console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "100170"
},
{
"model": "sitesentinel integra console 16q3.1",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "100"
},
{
"model": "sitesentinel isite atg console 17q2.1",
"scope": "ne",
"trust": 0.3,
"vendor": "opw",
"version": null
},
{
"model": "sitesentinel integra console 17q2.1",
"scope": "ne",
"trust": 0.3,
"vendor": "opw",
"version": "500"
},
{
"model": "sitesentinel integra console 17q2.1",
"scope": "ne",
"trust": 0.3,
"vendor": "opw",
"version": "100"
},
{
"model": "16q3.1",
"scope": null,
"trust": 0.2,
"vendor": "sitesentinel isite atg",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sitesentinel isite atg",
"version": "*"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sitesentinel isite atg",
"version": "189"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sitesentinel isite atg",
"version": "191"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sitesentinel isite atg",
"version": "195"
},
{
"model": "16q3.1",
"scope": null,
"trust": 0.2,
"vendor": "sitesentinel integra 500",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sitesentinel integra 500",
"version": "*"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sitesentinel integra 500",
"version": "189"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sitesentinel integra 500",
"version": "191"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sitesentinel integra 500",
"version": "195"
},
{
"model": "16q3.1",
"scope": null,
"trust": 0.2,
"vendor": "sitesentinel integra 100",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sitesentinel integra 100",
"version": "*"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sitesentinel integra 100",
"version": "189"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sitesentinel integra 100",
"version": "191"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sitesentinel integra 100",
"version": "195"
}
],
"sources": [
{
"db": "IVD",
"id": "4dc34a58-b228-4e9f-8de5-51f6bd15288c"
},
{
"db": "CNVD",
"id": "CNVD-2017-24366"
},
{
"db": "BID",
"id": "100563"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007910"
},
{
"db": "NVD",
"id": "CVE-2017-12731"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-083"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_isite_atg_firmware:191:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_isite_atg_firmware:195:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_isite_atg_firmware:16q3.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_isite_atg_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "175",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_isite_atg_firmware:189:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:opwglobal:sitesentinel_isite_atg:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_integra_500_firmware:195:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_integra_500_firmware:16q3.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_integra_500_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "175",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_integra_500_firmware:189:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_integra_500_firmware:191:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:opwglobal:sitesentinel_integra_500:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_integra_100_firmware:189:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_integra_100_firmware:191:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_integra_100_firmware:195:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_integra_100_firmware:16q3.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_integra_100_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "175",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:opwglobal:sitesentinel_integra_100:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2017-12731"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "OPW",
"sources": [
{
"db": "BID",
"id": "100563"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-083"
}
],
"trust": 0.9
},
"cve": "CVE-2017-12731",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Partial",
"baseScore": 7.5,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "CVE-2017-12731",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 8.5,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CNVD-2017-24366",
"impactScore": 7.8,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "NONE",
"baseScore": 8.5,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "4dc34a58-b228-4e9f-8de5-51f6bd15288c",
"impactScore": 7.8,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:P/A:N",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-103283",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "NVD",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 9.8,
"baseSeverity": "Critical",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2017-12731",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "NVD",
"id": "CVE-2017-12731",
"trust": 1.8,
"value": "CRITICAL"
},
{
"author": "CNVD",
"id": "CNVD-2017-24366",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201709-083",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "IVD",
"id": "4dc34a58-b228-4e9f-8de5-51f6bd15288c",
"trust": 0.2,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-103283",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "4dc34a58-b228-4e9f-8de5-51f6bd15288c"
},
{
"db": "CNVD",
"id": "CNVD-2017-24366"
},
{
"db": "VULHUB",
"id": "VHN-103283"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007910"
},
{
"db": "NVD",
"id": "CVE-2017-12731"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-083"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "A SQL Injection issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSite ATG consoles with the following software versions: older than V175, V175-V189, V191-V195, and V16Q3.1. The application is vulnerable to injection of malicious SQL queries via the input from the client. Multiple OPW Products are prone to an SQL-injection vulnerability and an authentication-bypass vulnerability. \nAn attacker can exploit these issues to bypass certain security restrictions, perform unauthorized actions, modify the logic of SQL queries, compromise the software, retrieve information, or modify data; other consequences are possible as well. SQL injection vulnerabilities exist in multi-span OPWA products",
"sources": [
{
"db": "NVD",
"id": "CVE-2017-12731"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007910"
},
{
"db": "CNVD",
"id": "CNVD-2017-24366"
},
{
"db": "BID",
"id": "100563"
},
{
"db": "IVD",
"id": "4dc34a58-b228-4e9f-8de5-51f6bd15288c"
},
{
"db": "VULHUB",
"id": "VHN-103283"
}
],
"trust": 2.7
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2017-12731",
"trust": 3.6
},
{
"db": "ICS CERT",
"id": "ICSA-17-243-04",
"trust": 3.4
},
{
"db": "BID",
"id": "100563",
"trust": 2.0
},
{
"db": "CNNVD",
"id": "CNNVD-201709-083",
"trust": 0.9
},
{
"db": "CNVD",
"id": "CNVD-2017-24366",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007910",
"trust": 0.8
},
{
"db": "IVD",
"id": "4DC34A58-B228-4E9F-8DE5-51F6BD15288C",
"trust": 0.2
},
{
"db": "VULHUB",
"id": "VHN-103283",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "4dc34a58-b228-4e9f-8de5-51f6bd15288c"
},
{
"db": "CNVD",
"id": "CNVD-2017-24366"
},
{
"db": "VULHUB",
"id": "VHN-103283"
},
{
"db": "BID",
"id": "100563"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007910"
},
{
"db": "NVD",
"id": "CVE-2017-12731"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-083"
}
]
},
"id": "VAR-201709-1007",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "4dc34a58-b228-4e9f-8de5-51f6bd15288c"
},
{
"db": "CNVD",
"id": "CNVD-2017-24366"
},
{
"db": "VULHUB",
"id": "VHN-103283"
}
],
"trust": 1.9
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "4dc34a58-b228-4e9f-8de5-51f6bd15288c"
},
{
"db": "CNVD",
"id": "CNVD-2017-24366"
}
]
},
"last_update_date": "2023-12-18T13:24:19.641000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "M00-20-4438 - SiteSentinel Integra and iSite Software Upgrade Procedure",
"trust": 0.8,
"url": "http://www.opwglobal.com/docs/libraries/manuals/electronic-systems/opw-fms-manuals/m00-20-4438-integra-software-upgrade.pdf?sfvrsn=14"
},
{
"title": "Patch for OPW Fuel Management Systems SiteSentinel Integra and SiteSentinel iSite SQL Injection Vulnerabilities",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchinfo/show/101384"
},
{
"title": "Multiple OPW product SQL Repair measures for injecting vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=74538"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-24366"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007910"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-083"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-89",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-103283"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007910"
},
{
"db": "NVD",
"id": "CVE-2017-12731"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.4,
"url": "https://ics-cert.us-cert.gov/advisories/icsa-17-243-04"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/100563"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-12731"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-12731"
},
{
"trust": 0.3,
"url": "http://www.opwglobal.com/"
},
{
"trust": 0.3,
"url": "http://www.opwglobal.com/docs/libraries/manuals/electronic-systems/opw-fms-manuals/m00-20-4438-integra-software-upgrade.pdf?sfvrsn=14"
},
{
"trust": 0.3,
"url": "http://www.opwglobal.com/docs/libraries/technical-bulletins/electronic-systems/fuel-control-and-tank-gauging/service-bulletins/sb-ofms-462.pdf"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-24366"
},
{
"db": "VULHUB",
"id": "VHN-103283"
},
{
"db": "BID",
"id": "100563"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007910"
},
{
"db": "NVD",
"id": "CVE-2017-12731"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-083"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "4dc34a58-b228-4e9f-8de5-51f6bd15288c"
},
{
"db": "CNVD",
"id": "CNVD-2017-24366"
},
{
"db": "VULHUB",
"id": "VHN-103283"
},
{
"db": "BID",
"id": "100563"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007910"
},
{
"db": "NVD",
"id": "CVE-2017-12731"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-083"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-09-02T00:00:00",
"db": "IVD",
"id": "4dc34a58-b228-4e9f-8de5-51f6bd15288c"
},
{
"date": "2017-09-01T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-24366"
},
{
"date": "2017-09-09T00:00:00",
"db": "VULHUB",
"id": "VHN-103283"
},
{
"date": "2017-08-30T00:00:00",
"db": "BID",
"id": "100563"
},
{
"date": "2017-10-04T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-007910"
},
{
"date": "2017-09-09T01:29:02.393000",
"db": "NVD",
"id": "CVE-2017-12731"
},
{
"date": "2017-08-30T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201709-083"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-09-02T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-24366"
},
{
"date": "2019-10-09T00:00:00",
"db": "VULHUB",
"id": "VHN-103283"
},
{
"date": "2017-08-30T00:00:00",
"db": "BID",
"id": "100563"
},
{
"date": "2017-10-04T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-007910"
},
{
"date": "2019-10-09T23:23:13.060000",
"db": "NVD",
"id": "CVE-2017-12731"
},
{
"date": "2019-10-17T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201709-083"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201709-083"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural OPW Fuel Management Systems SiteSentinel In product SQL Injection vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-007910"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "SQL injection",
"sources": [
{
"db": "IVD",
"id": "4dc34a58-b228-4e9f-8de5-51f6bd15288c"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-083"
}
],
"trust": 0.8
}
}
VAR-201709-1008
Vulnerability from variot - Updated: 2023-12-18 13:24A Missing Authentication for Critical Function issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSite ATG consoles with the following software versions: older than V175, V175-V189, V191-V195, and V16Q3.1. An attacker may create an application user account to gain administrative privileges. Multiple OPW Products are prone to an SQL-injection vulnerability and an authentication-bypass vulnerability. An attacker can exploit these issues to bypass certain security restrictions, perform unauthorized actions, modify the logic of SQL queries, compromise the software, retrieve information, or modify data; other consequences are possible as well. The following products and versions are vulnerable: SiteSentinel Integra 100 Console prior to 175, 175 through 189, 191 through 195 and 16Q3.1 SiteSentinel Integra 500 Console prior to 175, 175 through 189, 191 through 195 and 16Q3.1 SiteSentinel iSite ATG Console prior to 175, 175 through 189, 191 through 195 and 16Q3.1. Several OPW products have authentication bypass vulnerabilities
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201709-1008",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "sitesentinel integra 100",
"scope": "eq",
"trust": 1.6,
"vendor": "opwglobal",
"version": "195"
},
{
"model": "sitesentinel integra 500",
"scope": "eq",
"trust": 1.6,
"vendor": "opwglobal",
"version": "189"
},
{
"model": "sitesentinel integra 100",
"scope": "eq",
"trust": 1.6,
"vendor": "opwglobal",
"version": "16q3.1"
},
{
"model": "sitesentinel integra 500",
"scope": "eq",
"trust": 1.6,
"vendor": "opwglobal",
"version": "16q3.1"
},
{
"model": "sitesentinel integra 100",
"scope": "eq",
"trust": 1.6,
"vendor": "opwglobal",
"version": "189"
},
{
"model": "sitesentinel integra 500",
"scope": "eq",
"trust": 1.6,
"vendor": "opwglobal",
"version": "195"
},
{
"model": "sitesentinel integra 500",
"scope": "eq",
"trust": 1.6,
"vendor": "opwglobal",
"version": "191"
},
{
"model": "sitesentinel integra 100",
"scope": "eq",
"trust": 1.6,
"vendor": "opwglobal",
"version": "191"
},
{
"model": "sitesentinel integra 100",
"scope": "lte",
"trust": 1.0,
"vendor": "opwglobal",
"version": "175"
},
{
"model": "sitesentinel integra 500",
"scope": "lte",
"trust": 1.0,
"vendor": "opwglobal",
"version": "175"
},
{
"model": "sitesentinel isite atg",
"scope": "eq",
"trust": 1.0,
"vendor": "opwglobal",
"version": "189"
},
{
"model": "sitesentinel isite atg",
"scope": "eq",
"trust": 1.0,
"vendor": "opwglobal",
"version": "16q3.1"
},
{
"model": "sitesentinel isite atg",
"scope": "eq",
"trust": 1.0,
"vendor": "opwglobal",
"version": "195"
},
{
"model": "sitesentinel isite atg",
"scope": "eq",
"trust": 1.0,
"vendor": "opwglobal",
"version": "191"
},
{
"model": "sitesentinel isite atg",
"scope": "lte",
"trust": 1.0,
"vendor": "opwglobal",
"version": "175"
},
{
"model": "sitesentinel integra 100",
"scope": "eq",
"trust": 0.8,
"vendor": "opw fuel management",
"version": "v16q3.1"
},
{
"model": "sitesentinel integra 100",
"scope": "lt",
"trust": 0.8,
"vendor": "opw fuel management",
"version": "v175"
},
{
"model": "sitesentinel integra 100",
"scope": "eq",
"trust": 0.8,
"vendor": "opw fuel management",
"version": "v175-v189"
},
{
"model": "sitesentinel integra 100",
"scope": "eq",
"trust": 0.8,
"vendor": "opw fuel management",
"version": "v191-v195"
},
{
"model": "sitesentinel integra 500",
"scope": "eq",
"trust": 0.8,
"vendor": "opw fuel management",
"version": "v16q3.1"
},
{
"model": "sitesentinel integra 500",
"scope": "lt",
"trust": 0.8,
"vendor": "opw fuel management",
"version": "v175"
},
{
"model": "sitesentinel integra 500",
"scope": "eq",
"trust": 0.8,
"vendor": "opw fuel management",
"version": "v175-v189"
},
{
"model": "sitesentinel integra 500",
"scope": "eq",
"trust": 0.8,
"vendor": "opw fuel management",
"version": "v191-v195"
},
{
"model": "sitesentinel isite atg",
"scope": "eq",
"trust": 0.8,
"vendor": "opw fuel management",
"version": "v16q3.1"
},
{
"model": "sitesentinel isite atg",
"scope": "lt",
"trust": 0.8,
"vendor": "opw fuel management",
"version": "v175"
},
{
"model": "sitesentinel isite atg",
"scope": "eq",
"trust": 0.8,
"vendor": "opw fuel management",
"version": "v175-v189"
},
{
"model": "sitesentinel isite atg",
"scope": "eq",
"trust": 0.8,
"vendor": "opw fuel management",
"version": "v191-v195"
},
{
"model": "fuel management systems sitesentinel isite atg",
"scope": "lt",
"trust": 0.6,
"vendor": "opw",
"version": "v175"
},
{
"model": "fuel management systems sitesentinel isite atg",
"scope": "eq",
"trust": 0.6,
"vendor": "opw",
"version": "v175-v189"
},
{
"model": "fuel management systems sitesentinel isite atg",
"scope": "eq",
"trust": 0.6,
"vendor": "opw",
"version": "v191-v195"
},
{
"model": "fuel management systems sitesentinel isite atg v16q3.1",
"scope": null,
"trust": 0.6,
"vendor": "opw",
"version": null
},
{
"model": "fuel management systems sitesentinel integra",
"scope": "eq",
"trust": 0.6,
"vendor": "opw",
"version": "100\u003cv175"
},
{
"model": "fuel management systems sitesentinel integra",
"scope": "eq",
"trust": 0.6,
"vendor": "opw",
"version": "100v175-v189"
},
{
"model": "fuel management systems sitesentinel integra",
"scope": "eq",
"trust": 0.6,
"vendor": "opw",
"version": "100v191-v195"
},
{
"model": "fuel management systems sitesentinel integra v16q3.1",
"scope": "eq",
"trust": 0.6,
"vendor": "opw",
"version": "100"
},
{
"model": "fuel management systems sitesentinel integra",
"scope": "eq",
"trust": 0.6,
"vendor": "opw",
"version": "500\u003cv175"
},
{
"model": "fuel management systems sitesentinel integra",
"scope": "eq",
"trust": 0.6,
"vendor": "opw",
"version": "500v175-v189"
},
{
"model": "fuel management systems sitesentinel integra",
"scope": "eq",
"trust": 0.6,
"vendor": "opw",
"version": "500v191-v195"
},
{
"model": "fuel management systems sitesentinel integra v16q3.1",
"scope": "eq",
"trust": 0.6,
"vendor": "opw",
"version": "500"
},
{
"model": "sitesentinel integra 500",
"scope": "eq",
"trust": 0.6,
"vendor": "opwglobal",
"version": "175"
},
{
"model": "sitesentinel integra 100",
"scope": "eq",
"trust": 0.6,
"vendor": "opwglobal",
"version": "175"
},
{
"model": "sitesentinel isite atg console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "195"
},
{
"model": "sitesentinel isite atg console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "191"
},
{
"model": "sitesentinel isite atg console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "189"
},
{
"model": "sitesentinel isite atg console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "175"
},
{
"model": "sitesentinel isite atg console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "170"
},
{
"model": "sitesentinel isite atg console 16q3.1",
"scope": null,
"trust": 0.3,
"vendor": "opw",
"version": null
},
{
"model": "sitesentinel integra console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "500195"
},
{
"model": "sitesentinel integra console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "500191"
},
{
"model": "sitesentinel integra console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "500189"
},
{
"model": "sitesentinel integra console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "500175"
},
{
"model": "sitesentinel integra console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "500170"
},
{
"model": "sitesentinel integra console 16q3.1",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "500"
},
{
"model": "sitesentinel integra console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "100195"
},
{
"model": "sitesentinel integra console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "100191"
},
{
"model": "sitesentinel integra console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "100189"
},
{
"model": "sitesentinel integra console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "100175"
},
{
"model": "sitesentinel integra console",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "100170"
},
{
"model": "sitesentinel integra console 16q3.1",
"scope": "eq",
"trust": 0.3,
"vendor": "opw",
"version": "100"
},
{
"model": "sitesentinel isite atg console 17q2.1",
"scope": "ne",
"trust": 0.3,
"vendor": "opw",
"version": null
},
{
"model": "sitesentinel integra console 17q2.1",
"scope": "ne",
"trust": 0.3,
"vendor": "opw",
"version": "500"
},
{
"model": "sitesentinel integra console 17q2.1",
"scope": "ne",
"trust": 0.3,
"vendor": "opw",
"version": "100"
},
{
"model": "16q3.1",
"scope": null,
"trust": 0.2,
"vendor": "sitesentinel isite atg",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sitesentinel isite atg",
"version": "*"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sitesentinel isite atg",
"version": "189"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sitesentinel isite atg",
"version": "191"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sitesentinel isite atg",
"version": "195"
},
{
"model": "16q3.1",
"scope": null,
"trust": 0.2,
"vendor": "sitesentinel integra 500",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sitesentinel integra 500",
"version": "*"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sitesentinel integra 500",
"version": "189"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sitesentinel integra 500",
"version": "191"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sitesentinel integra 500",
"version": "195"
},
{
"model": "16q3.1",
"scope": null,
"trust": 0.2,
"vendor": "sitesentinel integra 100",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sitesentinel integra 100",
"version": "*"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sitesentinel integra 100",
"version": "189"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sitesentinel integra 100",
"version": "191"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sitesentinel integra 100",
"version": "195"
}
],
"sources": [
{
"db": "IVD",
"id": "ed1d7081-51f5-4c7d-9067-973dbf8e3b1f"
},
{
"db": "CNVD",
"id": "CNVD-2017-24367"
},
{
"db": "BID",
"id": "100563"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007911"
},
{
"db": "NVD",
"id": "CVE-2017-12733"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-082"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_isite_atg_firmware:191:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_isite_atg_firmware:16q3.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_isite_atg_firmware:189:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_isite_atg_firmware:195:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_isite_atg_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "175",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:opwglobal:sitesentinel_isite_atg:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_integra_500_firmware:16q3.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_integra_500_firmware:189:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_integra_500_firmware:191:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_integra_500_firmware:195:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_integra_500_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "175",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:opwglobal:sitesentinel_integra_500:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_integra_100_firmware:189:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_integra_100_firmware:191:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_integra_100_firmware:16q3.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_integra_100_firmware:195:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opwglobal:sitesentinel_integra_100_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "175",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:opwglobal:sitesentinel_integra_100:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2017-12733"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "OPW",
"sources": [
{
"db": "BID",
"id": "100563"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-082"
}
],
"trust": 0.9
},
"cve": "CVE-2017-12733",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Partial",
"baseScore": 7.5,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "CVE-2017-12733",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 0.9,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CNVD-2017-24367",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "ed1d7081-51f5-4c7d-9067-973dbf8e3b1f",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-103285",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "NVD",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 9.8,
"baseSeverity": "Critical",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2017-12733",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "NVD",
"id": "CVE-2017-12733",
"trust": 1.8,
"value": "CRITICAL"
},
{
"author": "CNVD",
"id": "CNVD-2017-24367",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201709-082",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "IVD",
"id": "ed1d7081-51f5-4c7d-9067-973dbf8e3b1f",
"trust": 0.2,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-103285",
"trust": 0.1,
"value": "HIGH"
},
{
"author": "VULMON",
"id": "CVE-2017-12733",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "ed1d7081-51f5-4c7d-9067-973dbf8e3b1f"
},
{
"db": "CNVD",
"id": "CNVD-2017-24367"
},
{
"db": "VULHUB",
"id": "VHN-103285"
},
{
"db": "VULMON",
"id": "CVE-2017-12733"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007911"
},
{
"db": "NVD",
"id": "CVE-2017-12733"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-082"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "A Missing Authentication for Critical Function issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSite ATG consoles with the following software versions: older than V175, V175-V189, V191-V195, and V16Q3.1. An attacker may create an application user account to gain administrative privileges. Multiple OPW Products are prone to an SQL-injection vulnerability and an authentication-bypass vulnerability. \nAn attacker can exploit these issues to bypass certain security restrictions, perform unauthorized actions, modify the logic of SQL queries, compromise the software, retrieve information, or modify data; other consequences are possible as well. \nThe following products and versions are vulnerable:\nSiteSentinel Integra 100 Console prior to 175, 175 through 189, 191 through 195 and 16Q3.1\nSiteSentinel Integra 500 Console prior to 175, 175 through 189, 191 through 195 and 16Q3.1\nSiteSentinel iSite ATG Console prior to 175, 175 through 189, 191 through 195 and 16Q3.1. Several OPW products have authentication bypass vulnerabilities",
"sources": [
{
"db": "NVD",
"id": "CVE-2017-12733"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007911"
},
{
"db": "CNVD",
"id": "CNVD-2017-24367"
},
{
"db": "BID",
"id": "100563"
},
{
"db": "IVD",
"id": "ed1d7081-51f5-4c7d-9067-973dbf8e3b1f"
},
{
"db": "VULHUB",
"id": "VHN-103285"
},
{
"db": "VULMON",
"id": "CVE-2017-12733"
}
],
"trust": 2.79
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2017-12733",
"trust": 3.7
},
{
"db": "ICS CERT",
"id": "ICSA-17-243-04",
"trust": 3.5
},
{
"db": "BID",
"id": "100563",
"trust": 2.1
},
{
"db": "CNNVD",
"id": "CNNVD-201709-082",
"trust": 0.9
},
{
"db": "CNVD",
"id": "CNVD-2017-24367",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007911",
"trust": 0.8
},
{
"db": "IVD",
"id": "ED1D7081-51F5-4C7D-9067-973DBF8E3B1F",
"trust": 0.2
},
{
"db": "VULHUB",
"id": "VHN-103285",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2017-12733",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "ed1d7081-51f5-4c7d-9067-973dbf8e3b1f"
},
{
"db": "CNVD",
"id": "CNVD-2017-24367"
},
{
"db": "VULHUB",
"id": "VHN-103285"
},
{
"db": "VULMON",
"id": "CVE-2017-12733"
},
{
"db": "BID",
"id": "100563"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007911"
},
{
"db": "NVD",
"id": "CVE-2017-12733"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-082"
}
]
},
"id": "VAR-201709-1008",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "ed1d7081-51f5-4c7d-9067-973dbf8e3b1f"
},
{
"db": "CNVD",
"id": "CNVD-2017-24367"
},
{
"db": "VULHUB",
"id": "VHN-103285"
}
],
"trust": 1.9
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "ed1d7081-51f5-4c7d-9067-973dbf8e3b1f"
},
{
"db": "CNVD",
"id": "CNVD-2017-24367"
}
]
},
"last_update_date": "2023-12-18T13:24:19.600000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "M00-20-4438 - SiteSentinel Integra and iSite Software Upgrade Procedure",
"trust": 0.8,
"url": "http://www.opwglobal.com/docs/libraries/manuals/electronic-systems/opw-fms-manuals/m00-20-4438-integra-software-upgrade.pdf?sfvrsn=14"
},
{
"title": "Patch for OPW Fuel Management Systems SiteSentinel Integra and SiteSentinel iSite Privilege Escalation Vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchinfo/show/101385"
},
{
"title": "Multiple OPW Product security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=74537"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-24367"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007911"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-082"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-306",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-103285"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007911"
},
{
"db": "NVD",
"id": "CVE-2017-12733"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.5,
"url": "https://ics-cert.us-cert.gov/advisories/icsa-17-243-04"
},
{
"trust": 1.9,
"url": "http://www.securityfocus.com/bid/100563"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-12733"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-12733"
},
{
"trust": 0.3,
"url": "http://www.opwglobal.com/"
},
{
"trust": 0.3,
"url": "http://www.opwglobal.com/docs/libraries/manuals/electronic-systems/opw-fms-manuals/m00-20-4438-integra-software-upgrade.pdf?sfvrsn=14"
},
{
"trust": 0.3,
"url": "http://www.opwglobal.com/docs/libraries/technical-bulletins/electronic-systems/fuel-control-and-tank-gauging/service-bulletins/sb-ofms-462.pdf"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/306.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-24367"
},
{
"db": "VULHUB",
"id": "VHN-103285"
},
{
"db": "VULMON",
"id": "CVE-2017-12733"
},
{
"db": "BID",
"id": "100563"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007911"
},
{
"db": "NVD",
"id": "CVE-2017-12733"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-082"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "ed1d7081-51f5-4c7d-9067-973dbf8e3b1f"
},
{
"db": "CNVD",
"id": "CNVD-2017-24367"
},
{
"db": "VULHUB",
"id": "VHN-103285"
},
{
"db": "VULMON",
"id": "CVE-2017-12733"
},
{
"db": "BID",
"id": "100563"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007911"
},
{
"db": "NVD",
"id": "CVE-2017-12733"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-082"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-09-02T00:00:00",
"db": "IVD",
"id": "ed1d7081-51f5-4c7d-9067-973dbf8e3b1f"
},
{
"date": "2017-09-01T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-24367"
},
{
"date": "2017-09-09T00:00:00",
"db": "VULHUB",
"id": "VHN-103285"
},
{
"date": "2017-09-09T00:00:00",
"db": "VULMON",
"id": "CVE-2017-12733"
},
{
"date": "2017-08-30T00:00:00",
"db": "BID",
"id": "100563"
},
{
"date": "2017-10-04T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-007911"
},
{
"date": "2017-09-09T01:29:02.423000",
"db": "NVD",
"id": "CVE-2017-12733"
},
{
"date": "2017-08-30T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201709-082"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-09-02T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-24367"
},
{
"date": "2019-10-09T00:00:00",
"db": "VULHUB",
"id": "VHN-103285"
},
{
"date": "2019-10-09T00:00:00",
"db": "VULMON",
"id": "CVE-2017-12733"
},
{
"date": "2017-08-30T00:00:00",
"db": "BID",
"id": "100563"
},
{
"date": "2017-10-04T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-007911"
},
{
"date": "2019-10-09T23:23:13.373000",
"db": "NVD",
"id": "CVE-2017-12733"
},
{
"date": "2019-10-17T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201709-082"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201709-082"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural OPW Fuel Management Systems SiteSentinel Vulnerability related to lack of certification for critical functions in the product",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-007911"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Access control error",
"sources": [
{
"db": "IVD",
"id": "ed1d7081-51f5-4c7d-9067-973dbf8e3b1f"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-082"
}
],
"trust": 0.8
}
}