BA Systems BAS920 Firmware 01.01.00
Approved changes feed: RSS · Atom
cpe:2.3:o:basystems:bas920_firmware:01.01.00:*:*:*:*:*:*:*
part: o version: 01.01.00 update: *
| Vendor | Basystems (b30cfb7d-9b1c-5677-b6a2-8834a07afcc1) |
|---|---|
| Product | Bas920 Firmware (fd8de0a4-8730-5aca-8a68-f9f429b89e78) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-17974 |
vulnerable | 2026-06-08 05:09:10.138009 |
Details available
BA SYSTEMS BAS Web on BAS920 devices (with Firmware 01.01.00*, HTTPserv 00002, and Script 02.*) and ISC2000 devices allows remote attackers to obtain sensitive information via a request for isc/get_sid_js.aspx or isc/get_sid.aspx, as demonstrated by obtaining administrative access by subsequently using the credential information for the Supervisor/Administrator account.
Published: 2017-12-29T21:00:00.000Z
Updated: 2024-09-17T02:27:43.984Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.