CVE-2017-10225
First published: Tue Aug 08 2017(Updated: )
Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Hospitality Applications (subcomponent: OPS Operations). The supported version that is affected is 5.5. Difficult to exploit vulnerability allows physical access to compromise Oracle Hospitality RES 3700. While the vulnerability is in Oracle Hospitality RES 3700, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hospitality RES 3700 accessible data as well as unauthorized access to critical data or complete access to all Oracle Hospitality RES 3700 accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality RES 3700. CVSS 3.0 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Hospitality RES 3700 Firmware | =5.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-10225?
CVE-2017-10225 has a moderate severity rating due to its difficulty in exploitation requiring physical access.
How do I fix CVE-2017-10225?
The recommended fix for CVE-2017-10225 is to upgrade to a version of Oracle Hospitality RES 3700 that is not affected by this vulnerability.
What are the potential impacts of CVE-2017-10225?
The potential impacts of CVE-2017-10225 include unauthorized access to the Oracle Hospitality RES 3700 system and possible compromise of sensitive information.
Who is affected by CVE-2017-10225?
Organizations using version 5.5 of the Oracle Hospitality RES 3700 are affected by CVE-2017-10225.
Is CVE-2017-10225 a common vulnerability?
CVE-2017-10225 is not commonly encountered as it requires physical access for exploitation.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/last-modified-date
- agent/severity
- agent/remedy
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle hospitality res 3700 firmware
- version/oracle hospitality res 3700 firmware/5.5