CVE-2017-7916

A Permissions, Privileges, and Access Controls issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, and VSN300 WiFi Logger Card for React versions 2.1.3 and prior. The web application does not properly restrict privileges of the Guest account. A malicious user may be able to gain access to configuration information that should be restricted.

• CWE-264
• CWE-269

• http://search.abb.com/library/Download.aspx?DocumentID=9AKK107045A1977&LanguageCode=en&DocumentPartId=&Action=LaunchVendor Advisory
• http://www.securityfocus.com/bid/99558Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-192-03Third Party Advisory, US Government Resource
• http://search.abb.com/library/Download.aspx?DocumentID=9AKK107045A1977&LanguageCode=en&DocumentPartId=&Action=LaunchVendor Advisory
• http://www.securityfocus.com/bid/99558Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-192-03Third Party Advisory, US Government Resource

Published

Aug 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7910A Stack-Based Buffer Overflow issue was discovered in Digita…
• CVE-2017-7911A Code Injection issue was discovered in CyberVision Kaa IoT…
• CVE-2017-7912Hanwha Techwin SRN-4000, SRN-4000 firmware versions prior to…
• CVE-2017-7913A Plaintext Storage of a Password issue was discovered in Mo…
• CVE-2017-7914A Missing Authorization issue was discovered in Rockwell Aut…
• CVE-2017-7915An Improper Restriction of Excessive Authentication Attempts…
• CVE-2017-7917A Cross-Site Request Forgery issue was discovered in Moxa On…
• CVE-2017-7918An Improper Access Control issue was discovered in Cambium N…
• CVE-2017-7919An Improper Authentication issue was discovered in Newport X…
• CVE-2017-7920An Improper Authentication issue was discovered in ABB VSN30…
• CVE-2017-7921An Improper Authentication issue was discovered in Hikvision…9.8
• CVE-2017-7922An Improper Privilege Management issue was discovered in Cam…