CVE-2017-15583

The embedded web server on ABB Fox515T 1.0 devices is vulnerable to Local File Inclusion. It accepts a parameter that specifies a file for display or for use as a template. The filename is not validated; an attacker could retrieve any file.

• CWE-200

• http://search-ext.abb.com/library/Download.aspx?DocumentID=1KHW028693&LanguageCode=en&DocumentPartId=&Action=LaunchVendor Advisory
• http://search-ext.abb.com/library/Download.aspx?DocumentID=1KHW028693&LanguageCode=en&DocumentPartId=&Action=LaunchVendor Advisory

Published

Oct 18, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15578In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists vi…
• CVE-2017-15579In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists vi…
• CVE-2017-1558IBM Maximo Asset Management 7.5 and 7.6 could allow a remote…
• CVE-2017-15580osTicket 1.10.1 provides a functionality to upload 'html' fi…
• CVE-2017-15581In the "Diary with lock" (aka WriteDiary) application 4.72 f…
• CVE-2017-15582In net.MCrypt in the "Diary with lock" (aka WriteDiary) appl…
• CVE-2017-15587An integer overflow was discovered in pdf_read_new_xref_sect…
• CVE-2017-15588An issue was discovered in Xen through 4.9.x allowing x86 PV…
• CVE-2017-15589An issue was discovered in Xen through 4.9.x allowing x86 HV…
• CVE-2017-1559Multiple IBM Rational products could disclose sensitive info…3.1
• CVE-2017-15590An issue was discovered in Xen through 4.9.x allowing x86 gu…
• CVE-2017-15591An issue was discovered in Xen 4.5.x through 4.9.x allowing …