Critical severity10.0NVD Advisory· Published Feb 13, 2017· Updated May 13, 2026

CVE-2017-5145

Description

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. Successful exploitation of this CROSS-SITE REQUEST FORGERY (CSRF) vulnerability can allow execution of unauthorized actions on the device such as configuration parameter changes, and saving modified configuration.

Affected products

N/a/Carlo Gavazzi Vmu C Em And Vmu C Pvv5
Range: Carlo Gavazzi VMU-C EM and VMU-C PV
Carlosgavazzi/Vmu C Em Firmware
cpe:2.3:o:carlosgavazzi:vmu-c_em_firmware:-:*:*:*:*:*:*:*
Carlosgavazzi/Vmu C Pv Firmware
cpe:2.3:o:carlosgavazzi:vmu-c_pv_firmware:-:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/95411nvdThird Party AdvisoryVDB Entry
ics-cert.us-cert.gov/advisories/ICSA-17-012-03nvdThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000