CVE-2017-14852

An insecure communication was found between a user and the Orpak SiteOmat management console for all known versions, due to an invalid SSL certificate. The attack allows for an eavesdropper to capture the communication and decrypt the data.

• CWE-310
• CWE-311

• http://www.orpak.comVendor Advisory
• http://www.securityfocus.com/bid/108167Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01Third Party Advisory, US Government Resource
• http://www.orpak.comVendor Advisory
• http://www.securityfocus.com/bid/108167Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01Third Party Advisory, US Government Resource

Published

Jun 3, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14847Mojoomla WPAMS Apartment Management System for WordPress all…
• CVE-2017-14848WPHRM Human Resource Management System for WordPress 1.0 all…8.8
• CVE-2017-14849Node.js 8.5.0 before 8.6.0 allows remote attackers to access…
• CVE-2017-1485IBM Cognos Analytics 11.0 is vulnerable to cross-site script…
• CVE-2017-14850All known versions of the Orpak SiteOmat web management cons…6.1
• CVE-2017-14851A SQL injection vulnerability exists in all Orpak SiteOmat v…9.8
• CVE-2017-14853The Orpak SiteOmat OrCU component is vulnerable to code inje…8.6
• CVE-2017-14854A stack buffer overflow exists in one of the Orpak SiteOmat …9.1
• CVE-2017-14855Red Lion HMI panels allow remote attackers to cause a denial…
• CVE-2017-14857In Exiv2 0.26, there is an invalid free in the Image class i…
• CVE-2017-14858There is a heap-based buffer overflow in the Exiv2::l2Data f…
• CVE-2017-14859An Invalid memory address dereference was discovered in Exiv…5.5