CVE-2017-14026

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In Ice Qube Thermal Management Center versions prior to version 4.13, the web application does not properly authenticate users which may allow an attacker to gain access to sensitive information.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-287

Affected software

No affected versions have been published.

Timeline

Published: Sep 6, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-140279.8A Use of Hard-coded Credentials issue was discovered in Korenix JetNet JetNet5018G version 1.4, JetNet5310G version 1.4a, JetNet5428G-2G-2FX CVE-2017-140287.5A Resource Exhaustion issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Versio CVE-2017-140297.8An Uncontrolled Search Path Element issue was discovered in Trihedral VTScada 11.3.03 and prior. The program will execute specially crafted CVE-2017-140307.8An issue was discovered in Moxa MXview v2.8 and prior. The unquoted service path escalation vulnerability could allow an authorized user wit CVE-2017-140317.8An Improper Access Control issue was discovered in Trihedral VTScada 11.3.03 and prior. A local, non-administrator user has privileges to re CVE-2017-140328.1ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer authentica CVE-2017-140337.5The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a CVE-2017-140348.8The restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.7 and other products, miscalculates a memcpy destinati CVE-2017-140359.8CrushFTP 8.x before 8.2.0 has a serialization vulnerability.CVE-2017-140366.1CrushFTP before 7.8.0 and 8.x before 8.2.0 has XSS.CVE-2017-140376.1CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP header vulnerability.CVE-2017-140386.1CrushFTP before 7.8.0 and 8.x before 8.2.0 has a redirect vulnerability.