Details of VAR-201706-0465

ID

VAR-201706-0465

CVE

CVE-2017-6041

TITLE

plural Marel Food Processing System Unsafe upload of dangerous file types in product firmware vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2017-005286

DESCRIPTION

An Unrestricted Upload issue was discovered in Marel Food Processing Systems M3000 terminal associated with the following systems: A320, A325, A371, A520 Master, A520 Slave, A530, A542, A571, Check Bin Grader, FlowlineQC T376, IPM3 Dual Cam v132, IPM3 Dual Cam v139, IPM3 Single Cam v132, P520, P574, SensorX13 QC flow line, SensorX23 QC Master, SensorX23 QC Slave, Speed Batcher, T374, T377, V36, V36B, and V36C; M3210 terminal associated with the same systems as the M3000 terminal identified above; M3000 desktop software associated with the same systems as the M3000 terminal identified above; MAC4 controller associated with the same systems as the M3000 terminal identified above; SensorX23 X-ray machine; SensorX25 X-ray machine; and MWS2 weighing system. This vulnerability allows an attacker to modify the operation and upload firmware changes without detection. plural Marel Food Processing System The product firmware contains a vulnerability related to the unlimited uploading of dangerous types of files.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. MarelSensorX25X-rayMachine and others are products of the medical industry of Iceland Marel that provide various medical tests. There are arbitrary file upload vulnerabilities in MarelFoodProcessingSystems in several Marel products. Marel Food Processing Systems are prone to following security vulnerabilities: 1. A security-bypass vulnerability. 2. Marel SensorX25 X-ray Machine, etc

Trust: 2.7

sources: NVD: CVE-2017-6041 // JVNDB: JVNDB-2017-005286 // CNVD: CNVD-2017-05777 // BID: 97388 // IVD: 688c5c78-70ee-4494-8465-824cb5226abf // VULHUB: VHN-114244

IOT TAXONOMY

category:	['ICS', 'Network device']	sub_category:	-	Trust: 0.6
category:	['ICS']	sub_category:	-	Trust: 0.2

sources: IVD: 688c5c78-70ee-4494-8465-824cb5226abf // CNVD: CNVD-2017-05777

AFFECTED PRODUCTS

vendor:	marel	model:	a530	scope:	eq	version:	-	Trust: 1.6
vendor:	marel	model:	a325	scope:	eq	version:	-	Trust: 1.6
vendor:	marel	model:	ipm3 dual cam	scope:	eq	version:	132	Trust: 1.6
vendor:	marel	model:	p520	scope:	eq	version:	-	Trust: 1.6
vendor:	marel	model:	sensorx13 qc flow line	scope:	eq	version:	-	Trust: 1.6
vendor:	marel	model:	a520 master	scope:	eq	version:	-	Trust: 1.6
vendor:	marel	model:	a520 slave	scope:	eq	version:	-	Trust: 1.6
vendor:	marel	model:	p574	scope:	eq	version:	-	Trust: 1.6
vendor:	marel	model:	a371	scope:	eq	version:	-	Trust: 1.6
vendor:	marel	model:	a320	scope:	eq	version:	-	Trust: 1.6
vendor:	marel	model:	a542	scope:	eq	version:	-	Trust: 1.0
vendor:	marel	model:	check bin grader	scope:	eq	version:	-	Trust: 1.0
vendor:	marel	model:	ipm3 dual cam	scope:	eq	version:	139	Trust: 1.0
vendor:	marel	model:	sensorx23 qc slave	scope:	eq	version:	-	Trust: 1.0
vendor:	marel	model:	t374	scope:	eq	version:	-	Trust: 1.0
vendor:	marel	model:	t377	scope:	eq	version:	-	Trust: 1.0
vendor:	marel	model:	flowlineqc t376	scope:	eq	version:	-	Trust: 1.0
vendor:	marel	model:	sensorx23 qc master	scope:	eq	version:	-	Trust: 1.0
vendor:	marel	model:	v36c	scope:	eq	version:	-	Trust: 1.0
vendor:	marel	model:	v36	scope:	eq	version:	-	Trust: 1.0
vendor:	marel	model:	a571	scope:	eq	version:	-	Trust: 1.0
vendor:	marel	model:	v36b	scope:	eq	version:	-	Trust: 1.0
vendor:	marel	model:	speed batcher	scope:	eq	version:	-	Trust: 1.0
vendor:	marel	model:	a320	scope:	-	version:	-	Trust: 0.8
vendor:	marel	model:	a325	scope:	-	version:	-	Trust: 0.8
vendor:	marel	model:	a371	scope:	-	version:	-	Trust: 0.8
vendor:	marel	model:	a520 master	scope:	-	version:	-	Trust: 0.8
vendor:	marel	model:	a520 slave	scope:	-	version:	-	Trust: 0.8
vendor:	marel	model:	a530	scope:	-	version:	-	Trust: 0.8
vendor:	marel	model:	a542	scope:	-	version:	-	Trust: 0.8
vendor:	marel	model:	a571	scope:	-	version:	-	Trust: 0.8
vendor:	marel	model:	check bin grader	scope:	-	version:	-	Trust: 0.8
vendor:	marel	model:	flowlineqc t376	scope:	-	version:	-	Trust: 0.8
vendor:	marel	model:	ipm3 dual cam	scope:	-	version:	-	Trust: 0.8
vendor:	marel	model:	ipm3 single cam	scope:	-	version:	-	Trust: 0.8
vendor:	marel	model:	p520	scope:	-	version:	-	Trust: 0.8
vendor:	marel	model:	p574	scope:	-	version:	-	Trust: 0.8
vendor:	marel	model:	sensorx13 qc flow line	scope:	-	version:	-	Trust: 0.8
vendor:	marel	model:	sensorx23 qc master	scope:	-	version:	-	Trust: 0.8
vendor:	marel	model:	sensorx23 qc slave	scope:	-	version:	-	Trust: 0.8
vendor:	marel	model:	speed batcher	scope:	-	version:	-	Trust: 0.8
vendor:	marel	model:	t374	scope:	-	version:	-	Trust: 0.8
vendor:	marel	model:	t377	scope:	-	version:	-	Trust: 0.8
vendor:	marel	model:	v36	scope:	-	version:	-	Trust: 0.8
vendor:	marel	model:	v36b	scope:	-	version:	-	Trust: 0.8
vendor:	marel	model:	v36c	scope:	-	version:	-	Trust: 0.8
vendor:	marel	model:	sensorx25 x-ray machine	scope:	-	version:	-	Trust: 0.6
vendor:	marel	model:	sensorx23 x-ray machine	scope:	-	version:	-	Trust: 0.6
vendor:	marel	model:	mws2 weighing system	scope:	-	version:	-	Trust: 0.6
vendor:	marel	model:	mac4 controller	scope:	-	version:	-	Trust: 0.6
vendor:	marel	model:	m3210 termina	scope:	-	version:	-	Trust: 0.6
vendor:	marel	model:	m3000 termina	scope:	-	version:	-	Trust: 0.6
vendor:	ipm3 dual cam	model:	-	scope:	eq	version:	132	Trust: 0.4
vendor:	marel	model:	sensorx25 x-ray machine	scope:	eq	version:	0	Trust: 0.3
vendor:	marel	model:	sensorx23 x-ray machine	scope:	eq	version:	0	Trust: 0.3
vendor:	marel	model:	mws2 weighing system	scope:	eq	version:	0	Trust: 0.3
vendor:	marel	model:	mac4 controller	scope:	eq	version:	0	Trust: 0.3
vendor:	marel	model:	m3210 terminal	scope:	eq	version:	0	Trust: 0.3
vendor:	marel	model:	m3000 terminal	scope:	eq	version:	0	Trust: 0.3
vendor:	a320	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	flowlineqc t376	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	ipm3 dual cam	model:	-	scope:	eq	version:	139	Trust: 0.2
vendor:	p520	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	p574	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	sensorx13 qc flow line	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	sensorx23 qc master	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	sensorx23 qc slave	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	speed batcher	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	a325	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	t374	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	t377	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	v36	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	v36b	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	v36c	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	a371	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	a520 master	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	a520 slave	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	a530	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	a542	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	a571	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	check bin grader	model:	-	scope:	eq	version:	-	Trust: 0.2

sources: IVD: 688c5c78-70ee-4494-8465-824cb5226abf // CNVD: CNVD-2017-05777 // BID: 97388 // JVNDB: JVNDB-2017-005286 // NVD: CVE-2017-6041 // CNNVD: CNNVD-201704-318

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD:	CVE-2017-6041
value:	CRITICAL
Trust: 1.8
CNVD:	CNVD-2017-05777
value:	HIGH
Trust: 0.6
CNNVD:	CNNVD-201704-318
value:	CRITICAL
Trust: 0.6
IVD:	688c5c78-70ee-4494-8465-824cb5226abf
value:	CRITICAL
Trust: 0.2
VULHUB:	VHN-114244
value:	HIGH
Trust: 0.1

NVD:
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	FALSE
obtainAllPrivilege:	FALSE
obtainUserPrivilege:	FALSE
obtainOtherPrivilege:	FALSE
userInteractionRequired:	FALSE
version:	2.0
Trust: 1.0
NVD:	CVE-2017-6041
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.8
CNVD:	CNVD-2017-05777
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
IVD:	688c5c78-70ee-4494-8465-824cb5226abf
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2
VULHUB:	VHN-114244
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

NVD:
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	5.9
version:	3.0
Trust: 1.0
NVD:	CVE-2017-6041
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: IVD: 688c5c78-70ee-4494-8465-824cb5226abf // CNVD: CNVD-2017-05777 // VULHUB: VHN-114244 // JVNDB: JVNDB-2017-005286 // NVD: CVE-2017-6041 // CNNVD: CNNVD-201704-318

PROBLEMTYPE DATA

problemtype:

CWE-434

Trust: 1.9

sources: VULHUB: VHN-114244 // JVNDB: JVNDB-2017-005286 // NVD: CVE-2017-6041

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201704-318

TYPE

Code problem

Trust: 0.8

sources: IVD: 688c5c78-70ee-4494-8465-824cb5226abf // CNNVD: CNNVD-201704-318

CONFIGURATIONS

sources: NVD: CVE-2017-6041

PATCH

title:

Top Page

url:

http://marel.com/

Trust: 0.8

sources: JVNDB: JVNDB-2017-005286

EXTERNAL IDS

db:	NVD	id:	CVE-2017-6041	Trust: 3.6
db:	BID	id:	97388	Trust: 2.6
db:	ICS CERT	id:	ICSA-17-094-02	Trust: 2.0
db:	CNNVD	id:	CNNVD-201704-318	Trust: 0.9
db:	CNVD	id:	CNVD-2017-05777	Trust: 0.8
db:	ICS CERT	id:	ICSA-17-094-02B	Trust: 0.8
db:	JVNDB	id:	JVNDB-2017-005286	Trust: 0.8
db:	IVD	id:	688C5C78-70EE-4494-8465-824CB5226ABF	Trust: 0.2
db:	VULHUB	id:	VHN-114244	Trust: 0.1

sources: IVD: 688c5c78-70ee-4494-8465-824cb5226abf // CNVD: CNVD-2017-05777 // VULHUB: VHN-114244 // BID: 97388 // JVNDB: JVNDB-2017-005286 // NVD: CVE-2017-6041 // CNNVD: CNNVD-201704-318

REFERENCES

url:	http://www.securityfocus.com/bid/97388	Trust: 2.3
url:	https://ics-cert.us-cert.gov/advisories/icsa-17-094-02	Trust: 1.7
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-6041	Trust: 0.8
url:	https://ics-cert.us-cert.gov/advisories/icsa-17-094-02b	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2017-6041	Trust: 0.8
url:	http://marel.com/	Trust: 0.3
url:	https://ics-cert.us-cert.gov/advisories/icsa-17-094-02	Trust: 0.3

sources: CNVD: CNVD-2017-05777 // VULHUB: VHN-114244 // BID: 97388 // JVNDB: JVNDB-2017-005286 // NVD: CVE-2017-6041 // CNNVD: CNNVD-201704-318

CREDITS

Daniel Lance

Trust: 0.9

sources: BID: 97388 // CNNVD: CNNVD-201704-318

SOURCES

db:	IVD	id:	688c5c78-70ee-4494-8465-824cb5226abf
db:	CNVD	id:	CNVD-2017-05777
db:	VULHUB	id:	VHN-114244
db:	BID	id:	97388
db:	JVNDB	id:	JVNDB-2017-005286
db:	NVD	id:	CVE-2017-6041
db:	CNNVD	id:	CNNVD-201704-318

LAST UPDATE DATE

2023-12-18T12:43:36.285000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2017-05777	date:	2017-05-02T00:00:00
db:	VULHUB	id:	VHN-114244	date:	2019-10-09T00:00:00
db:	BID	id:	97388	date:	2017-04-11T00:02:00
db:	JVNDB	id:	JVNDB-2017-005286	date:	2017-07-25T00:00:00
db:	NVD	id:	CVE-2017-6041	date:	2019-10-09T23:28:37.043
db:	CNNVD	id:	CNNVD-201704-318	date:	2019-10-17T00:00:00

SOURCES RELEASE DATE

db:	IVD	id:	688c5c78-70ee-4494-8465-824cb5226abf	date:	2017-05-02T00:00:00
db:	CNVD	id:	CNVD-2017-05777	date:	2017-05-02T00:00:00
db:	VULHUB	id:	VHN-114244	date:	2017-06-30T00:00:00
db:	BID	id:	97388	date:	2017-04-04T00:00:00
db:	JVNDB	id:	JVNDB-2017-005286	date:	2017-07-25T00:00:00
db:	NVD	id:	CVE-2017-6041	date:	2017-06-30T03:29:00.563
db:	CNNVD	id:	CNNVD-201704-318	date:	2017-04-24T00:00:00