CVE-2017-11349

Published: Jul 17, 2017Modified: Apr 30, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

dataTaker DT8x dEX 1.72.007 allows remote attackers to compose programs or schedules, for purposes such as sending e-mail messages or making outbound connections to FTP servers for uploading data.

Affected (1)

Products: Thermofisher: Dt8x Firmware

Thermofisher

1 product

Dt8x Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Thermofisher Dt8x Firmware	Version 1.72.007

Running on/with	Platform Versions
Thermofisher Dt8x	All versions

Related CWEs

CWE-522

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (4)

https://nullku7.github.io/stuff/exposure/industrial/2017/05/02/Thermofisher-dataTaker.html

Source: cve@mitre.org

ExploitProductThird Party Advisory

https://twitter.com/nullku7/status/859238295959609344

Source: cve@mitre.org

Third Party Advisory

https://nullku7.github.io/stuff/exposure/industrial/2017/05/02/Thermofisher-dataTaker.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitProductThird Party Advisory

https://twitter.com/nullku7/status/859238295959609344

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.