CVE-2017-17704

A door-unlocking issue was discovered on Software House iStar Ultra devices through 6.5.2.20569 when used in conjunction with the IP-ACM Ethernet Door Module. The communications between the IP-ACM and the iStar Ultra is encrypted using a fixed AES key and IV. Each message is encrypted in CBC mode and restarts with the fixed IV, leading to replay attacks of entire messages. There is no authentication of messages beyond the use of the fixed AES key, so message forgery is also possible.

• CWE-330

• https://systemoverlord.com/2017/12/18/cve-2017-17704-broken-cryptography-in-istar-ultra-ip-acm-by-software-house.htmlThird Party Advisory
• https://systemoverlord.com/2017/12/18/cve-2017-17704-broken-cryptography-in-istar-ultra-ip-acm-by-software-house.htmlThird Party Advisory

Published

Dec 31, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-17697The Ping() function in ui/api/target.go in Harbor through 1.…8.6
• CVE-2017-17698Zoho ManageEngine Password Manager Pro 9 before 9.4 (9400) h…
• CVE-2017-17699K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL …
• CVE-2017-17700K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL …
• CVE-2017-17701K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL …
• CVE-2017-17703Synacor Zimbra Collaboration Suite (ZCS) before 8.8.3 has Pe…
• CVE-2017-17707Due to missing authorization checks, any authenticated user …
• CVE-2017-17708Because of insufficient authorization checks it is possible …
• CVE-2017-17712The raw_sendmsg() function in net/ipv4/raw.c in the Linux ke…7
• CVE-2017-17713Trape before 2017-11-05 has SQL injection via the /nr red pa…
• CVE-2017-17714Trape before 2017-11-05 has XSS via the /nr red parameter, t…
• CVE-2017-17715The saveFile method in MediaController.java in the Telegram …