First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2017-5157

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

An issue was discovered in Schneider Electric homeLYnk Controller, LSS100100, all versions prior to V1.5.0. The homeLYnk controller is susceptible to a cross-site scripting attack. User inputs can be manipulated to cause execution of JavaScript code.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	Schneider Electric homeLYnk Controller prior to V1.5.0	Schneider Electric homeLYnk Controller prior to V1.5.0

References

http://www.securityfocus.com/bid/95665Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-019-01Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/95665Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-019-01Third Party Advisory, US Government Resource

Timeline

Published: Feb 13, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-51589.8An Information Exposure issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. Credentials CVE-2017-51599.8An issue was discovered on Phoenix Contact mGuard devices that have been updated to Version 8.4.0. When updating an mGuard device to Version CVE-2017-51605.3An Inadequate Encryption Strength issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. T CVE-2017-51617.2An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, vers CVE-2017-51629.8An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Lack of authentication for remote service gives ac CVE-2017-51635.9An issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. After an administrator downloads CVE-2017-51646.1An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Input sent from a malicious client is not properly CVE-2017-51657.6An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. There is no CSRF Token generated per page and/or p CVE-2017-51669.8An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. An INFORMATION EXPOSURE flaw can be used to gain p CVE-2017-51678.6An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Users do not have any option to change their own p CVE-2017-51687.5An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Path Traversal vulnerabilities have been i CVE-2017-51697.5An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Cross Site Request Forgery vulnerabilities