CVE-2017-10221
First published: Tue Aug 08 2017(Updated: )
Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Hospitality Applications (subcomponent: OPS Operations). The supported version that is affected is 5.5. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality RES 3700 executes to compromise Oracle Hospitality RES 3700. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality RES 3700, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality RES 3700 accessible data as well as unauthorized read access to a subset of Oracle Hospitality RES 3700 accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality RES 3700. CVSS 3.0 Base Score 5.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Hospitality RES 3700 Firmware | =5.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-10221?
CVE-2017-10221 is rated as a low-severity vulnerability.
How do I fix CVE-2017-10221?
To fix CVE-2017-10221, update your Oracle Hospitality RES 3700 to the latest version provided by Oracle.
What components are affected by CVE-2017-10221?
CVE-2017-10221 affects the OPS Operations subcomponent of Oracle Hospitality RES 3700 version 5.5.
Can CVE-2017-10221 be exploited remotely?
CVE-2017-10221 is difficult to exploit and requires low privileges from a logged-on user.
Who is affected by CVE-2017-10221?
Organizations using Oracle Hospitality RES 3700 version 5.5 are affected by CVE-2017-10221.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/last-modified-date
- agent/severity
- agent/remedy
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle hospitality res 3700 firmware
- version/oracle hospitality res 3700 firmware/5.5