CVE-2017-17759

Critical · 9.8

CVSS

9.8

EPSS

11.3%

Published

Dec 19, 2017

CISA due date

—

The record

Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of service (by deleting the configuration) via a wc.dll?wwMaint~EditConfig request (which reaches an older version of a West Wind Web Connection HTTP service).

Affected packages

Ecosystem	Package	Introduced	Fixed