critical9.8Public exploit code
CVE-2017-17759
Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of service (by deleting the configuration)…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Conarc iChannel - Improper Access Restrictions2017-12-20 · webapps · multiple
Impact
Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of service (by deleting the configuration) via a wc.dll?wwMaint~EditConfig request (which reaches an older version of a West Wind Web Connection HTTP service).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Conarc | Ichannel | All versions |