CVE-2017-16748 - AskarLabs CVE Database

CVE-2017-16748

Vendor Ics-Cert

Product Niagara AX Framework and Niagara 4 Framework

Weakness CWE-287 · Improper authentication

Published August 20, 2018

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

An attacker can log into the local Niagara platform (Niagara AX Framework Versions 3.8 and prior or Niagara 4 Framework Versions 4.4 and prior) using a disabled account name and a blank password, granting the attacker administrator access to the Niagara system.

Key dates

02Disclosure timeline

August 20, 2018 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-16748 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/287.html

Related vulnerabilities

04Related CVE

CVE-2022-21684 User can bypass approval when invited to Discourse CVE-2024-49076 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability CVE-2026-44810 Microsoft Cryptographic Services Elevation of Privilege Vulnerability CVE-2019-1724 Cisco Small Business RV320 and RV325 Routers Session Hijacking Vulnerability CVE-2026-6456 Account Switcher <= 1.0.2 - Authenticated (Subscriber+) Authentication Bypass to Privilege Escalation