CVE-2017-15583: Infoleak
The embedded web server on ABB Fox515T 1.0 devices is vulnerable to Local File Inclusion. It accepts a parameter that specifies a file for display or for use as a template. The filename is not validated; an attacker could retrieve any file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-15583?
CVE-2017-15583 is rated as a high severity vulnerability due to its potential for local file inclusion and unauthorized file access.
How do I fix CVE-2017-15583?
To fix CVE-2017-15583, update the ABB Fox515T firmware to a version that includes validation for file input parameters.
What devices are affected by CVE-2017-15583?
CVE-2017-15583 specifically affects ABB Fox515T devices running firmware version 1.0_ics10 or earlier.
Can CVE-2017-15583 be exploited remotely?
CVE-2017-15583 requires local access to the device for exploitation, making it less of a remote threat.
What are the consequences of exploiting CVE-2017-15583?
Exploiting CVE-2017-15583 may allow an attacker to read sensitive files on the system, leading to information disclosure.