CVE-2017-11165

PoC —

CVSS 3.1

9.8 critical

EPSS

64%p99

Published

Jul 12, 2017 (Jul 12, 2017)

Modified

Jun 17, 2026

Description

dataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credential and configuration information via a direct request for the /services/getFile.cmd?userfile=config.xml URI.

Vendors: thermofisher
Products: dt80 dex firmware
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (64.1%)

In the news0 stories

No ingested article mentions this CVE yet.