CVE-2017-11349: Critical severity dataTaker Dt8x Firmware vulnerability
Published Jul 17, 2017
·Updated
dataTaker DT8x dEX 1.72.007 allows remote attackers to compose programs or schedules, for purposes such as sending e-mail messages or making outbound connections to FTP servers for uploading data.
Affected Software
4 affected components
dataTaker Dt8x Firmware=1.72.007
dataTaker DT8x
All of the following
Thermofisher Dt8x Firmware=1.72.007
Thermofisher Dt8x
Event History
Jul 17, 2017
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·01:18 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-11349?
CVE-2017-11349 has a medium severity due to its ability to allow remote attackers to execute unauthorized commands.
2
How do I fix CVE-2017-11349?
To fix CVE-2017-11349, upgrade the firmware of the dataTaker DT8x to a version later than 1.72.007.
3
What type of attack is possible with CVE-2017-11349?
CVE-2017-11349 allows remote attackers to compose programs which can potentially send e-mails or upload data to FTP servers.
4
Which software is affected by CVE-2017-11349?
CVE-2017-11349 specifically affects the dataTaker DT8x running firmware version 1.72.007.
5
Is CVE-2017-11349 exploitable over the internet?
Yes, CVE-2017-11349 is exploitable remotely, which makes it a significant risk if the device is accessible over the internet.