« Volver al listado

CVE-2017-9626

Estado: ModificadaCrítica (9.8)—

Systems using the Marel Food Processing Systems Pluto platform do not restrict remote access. Marel has created an update for Pluto-based applications. This update will restrict remote access by implementing SSH authentication.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Marel — Pluto1203Marel — Pluto2

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-9626",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "affectedData": [
        {
          "vendor": "Marel",
          "product": "Marel Food Processing Systems Pluto platform",
          "versions": [
            {
              "status": "affected",
              "version": "Graders using Pluto platform"
            },
            {
              "status": "affected",
              "version": "Portioning Machines using Pluto platform"
            },
            {
              "status": "affected",
              "version": "Flowline systems using Pluto platform"
            },
            {
              "status": "affected",
              "version": "Packing systems using Pluto platform"
            },
            {
              "status": "affected",
              "version": "SensorX machines using Pluto platform"
            },
            {
              "status": "affected",
              "version": "Target Batchers using Pluto platform"
            },
            {
              "status": "affected",
              "version": "and SpeedBatchers using Pluto platform"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-03-27T20:29:03.083",
  "references": [
    {
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-094-02B",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-094-02B",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "ics-cert@hq.dhs.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-732"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Systems using the Marel Food Processing Systems Pluto platform do not restrict remote access. Marel has created an update for Pluto-based applications. This update will restrict remote access by implementing SSH authentication."
    },
    {
      "lang": "es",
      "value": "Los sistemas que emplean la plataforma Marel Food Processing Systems Pluto no restringen el acceso remoto. Marel ha creado una actualización para las aplicaciones basadas en Pluto. Esta actualización restringirá el acceso remoto mediante la implementación de la autenticación SSH."
    }
  ],
  "lastModified": "2026-06-17T01:28:36.530",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:marel:pluto1203:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4EA541EA-7C77-436B-AF39-8A086652AC0C"
            },
            {
              "criteria": "cpe:2.3:a:marel:pluto2:1.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E3F78DC2-8AD7-4E74-B840-641953F66E00"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "ics-cert@hq.dhs.gov"
}