CVE-2017-5168

An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Path Traversal vulnerabilities have been identified. The flaws exist within the ActiveMQ Broker service that is installed as part of the product. By issuing specific HTTP requests, if a user visits a malicious page, an attacker can gain access to arbitrary files on the server. Smart Security Manager Versions 1.4 and prior to 1.31 are affected by these vulnerabilities. These vulnerabilities can allow for remote code execution.

• CWE-22

• http://www.securityfocus.com/bid/96147Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-040-01Patch, Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/96147Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-040-01Patch, Third Party Advisory, US Government Resource

Published

Feb 13, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5162An issue was discovered in BINOM3 Universal Multifunctional …
• CVE-2017-5163An issue was discovered in Belden Hirschmann GECKO Lite Mana…
• CVE-2017-5164An issue was discovered in BINOM3 Universal Multifunctional …
• CVE-2017-5165An issue was discovered in BINOM3 Universal Multifunctional …
• CVE-2017-5166An issue was discovered in BINOM3 Universal Multifunctional …
• CVE-2017-5167An issue was discovered in BINOM3 Universal Multifunctional …
• CVE-2017-5169An issue was discovered in Hanwha Techwin Smart Security Man…7.5
• CVE-2017-5170An Uncontrolled Search Path Element issue was discovered in …
• CVE-2017-5173An Improper Neutralization of Special Elements (in an OS com…9.8
• CVE-2017-5174An Authentication Bypass issue was discovered in Geutebruck …
• CVE-2017-5175Advantech WebAccess 8.1 and earlier contains a DLL hijacking…
• CVE-2017-5176A DLL Hijack issue was discovered in Rockwell Automation Con…