CVE-2017-9626

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Systems using the Marel Food Processing Systems Pluto platform do not restrict remote access. Marel has created an update for Pluto-based applications. This update will restrict remote access by implementing SSH authentication.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284 CWE-732

Affected software

Vendor	Product	Versions
Marel	Marel Food Processing Systems Pluto platform	Graders using Pluto platform; Portioning Machines using Pluto platform; Flowline systems using Pluto platform; Packing systems using Pluto platform; SensorX machines using Pluto platform; Target Batchers using Pluto platform; and SpeedBatchers using Pluto platform

References

https://ics-cert.us-cert.gov/advisories/ICSA-17-094-02BThird Party Advisory, US Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-17-094-02BThird Party Advisory, US Government Resource

Timeline

Published: Mar 27, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-96278.6An Uncontrolled Resource Consumption issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and pr CVE-2017-96285.3An Information Exposure issue was discovered in Saia Burgess Controls PCD Controllers with PCD firmware versions prior to 1.28.16 or 1.24.69 CVE-2017-96299.8A Stack-Based Buffer Overflow issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. Th CVE-2017-96309.4An Improper Authentication issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, CVE-2017-96317.5A Null Pointer Dereference issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The n CVE-2017-96329.8A Missing Encryption of Sensitive Data issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, al CVE-2017-96338.8An Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered in the Continental AG Infineon S-Gold 2 (PMB CVE-2017-96349.8Mitsubishi E-Designer, Version 7.52 Build 344 contains two code sections which may be exploited to allow an attacker to overwrite arbitrary CVE-2017-96353.9Schneider Electric Ampla MES 6.4 provides capability to configure users and their privileges. When Ampla MES users are configured to use Sim CVE-2017-96369.8Mitsubishi E-Designer, Version 7.52 Build 344 contains five code sections which may be exploited to overwrite the heap. This can result in a CVE-2017-96374.1Schneider Electric Ampla MES 6.4 provides capability to interact with data from third party databases. When connectivity to those databases CVE-2017-96389.8Mitsubishi E-Designer, Version 7.52 Build 344 contains six code sections which may be exploited to overwrite the stack. This can result in a