CVE-2017-7909

9.8 criticalEPSS 2.6%

Critical (9.8) in advantech b\+b smartworx mesr901 firmware. EPSS 2.6% chance of exploitation in the next 30 days.

A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx MESR901 firmware versions 1.5.2 and prior. The web interface uses JavaScript to check client authentication and redirect unauthorized users. Attackers may intercept requests and bypass authentication to access restricted web pages.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWEs: CWE-287, CWE-603
Published: 2017-05-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

advantech_b\+b_smartworx:mesr901_firmware

References

http://www.securityfocus.com/bid/98257
https://ics-cert.us-cert.gov/advisories/ICSA-17-122-03
http://www.securityfocus.com/bid/98257
https://ics-cert.us-cert.gov/advisories/ICSA-17-122-03

Check your stack JSON