Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2017-6041 Details

Description

An Unrestricted Upload issue was discovered in Marel Food Processing Systems M3000 terminal associated with the following systems: A320, A325, A371, A520 Master, A520 Slave, A530, A542, A571, Check Bin Grader, FlowlineQC T376, IPM3 Dual Cam v132, IPM3 Dual Cam v139, IPM3 Single Cam v132, P520, P574, SensorX13 QC flow line, SensorX23 QC Master, SensorX23 QC Slave, Speed Batcher, T374, T377, V36, V36B, and V36C; M3210 terminal associated with the same systems as the M3000 terminal identified above; M3000 desktop software associated with the same systems as the M3000 terminal identified above; MAC4 controller associated with the same systems as the M3000 terminal identified above; SensorX23 X-ray machine; SensorX25 X-ray machine; and MWS2 weighing system. This vulnerability allows an attacker to modify the operation and upload firmware changes without detection.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:9.8 CRITICALVector:CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://ics-cert.us-cert.gov/advisories/ICSA-17-094-02	CVE	MitigationThird Party AdvisoryUS Government Resource
http://www.securityfocus.com/bid/97388	CVE	Third Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-094-02	[email protected]	MitigationThird Party AdvisoryUS Government Resource
http://www.securityfocus.com/bid/97388	[email protected]	Third Party AdvisoryVDB Entry

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-434	Unrestricted Upload of File with Dangerous Type	[email protected]
CWE-434	Unrestricted Upload of File with Dangerous Type	[email protected]

Affected Products

Product	Versions
marel a320 firmware	All versions
CPE cpe:2.3:o:marel:a320_firmware:-:::::::* Remediation No remediation found in references.
marel a320	All versions
CPE cpe:2.3:h:marel:a320:-:::::::* Remediation No remediation found in references.
marel a325 firmware	All versions
CPE cpe:2.3:o:marel:a325_firmware:-:::::::* Remediation No remediation found in references.
marel a325	All versions
CPE cpe:2.3:h:marel:a325:-:::::::* Remediation No remediation found in references.
marel a371 firmware	All versions
CPE cpe:2.3:o:marel:a371_firmware:-:::::::* Remediation No remediation found in references.
marel a371	All versions
CPE cpe:2.3:h:marel:a371:-:::::::* Remediation No remediation found in references.
marel a520 master firmware	All versions
CPE cpe:2.3:o:marel:a520_master_firmware:-:::::::* Remediation No remediation found in references.
marel a520 master	All versions
CPE cpe:2.3:h:marel:a520_master:-:::::::* Remediation No remediation found in references.
marel a520 slave firmware	All versions
CPE cpe:2.3:o:marel:a520_slave_firmware:-:::::::* Remediation No remediation found in references.
marel a520 slave	All versions
CPE cpe:2.3:h:marel:a520_slave:-:::::::* Remediation No remediation found in references.
marel a530 firmware	All versions
CPE cpe:2.3:o:marel:a530_firmware:-:::::::* Remediation No remediation found in references.
marel a530	All versions
CPE cpe:2.3:h:marel:a530:-:::::::* Remediation No remediation found in references.
marel a542 firmware	All versions
CPE cpe:2.3:o:marel:a542_firmware:-:::::::* Remediation No remediation found in references.
marel a542	All versions
CPE cpe:2.3:h:marel:a542:-:::::::* Remediation No remediation found in references.
marel a571 firmware	All versions
CPE cpe:2.3:o:marel:a571_firmware:-:::::::* Remediation No remediation found in references.
marel a571	All versions
CPE cpe:2.3:h:marel:a571:-:::::::* Remediation No remediation found in references.
marel check bin grader firmware	All versions
CPE cpe:2.3:o:marel:check_bin_grader_firmware:-:::::::* Remediation No remediation found in references.
marel check bin grader	All versions
CPE cpe:2.3:h:marel:check_bin_grader:-:::::::* Remediation No remediation found in references.
marel flowlineqc t376 firmware	All versions
CPE cpe:2.3:o:marel:flowlineqc_t376_firmware:-:::::::* Remediation No remediation found in references.
marel flowlineqc t376	All versions
CPE cpe:2.3:h:marel:flowlineqc_t376:-:::::::* Remediation No remediation found in references.
marel ipm3 dual cam firmware	132 139
CPE cpe:2.3:o:marel:ipm3_dual_cam_firmware:132:::::::* cpe:2.3:o:marel:ipm3_dual_cam_firmware:139:::::::* Remediation No remediation found in references.
marel ipm3 dual cam	All versions
CPE cpe:2.3:h:marel:ipm3_dual_cam:-:::::::* Remediation No remediation found in references.
marel p520 firmware	All versions
CPE cpe:2.3:o:marel:p520_firmware:-:::::::* Remediation No remediation found in references.
marel p520	All versions
CPE cpe:2.3:h:marel:p520:-:::::::* Remediation No remediation found in references.
marel p574 firmware	All versions
CPE cpe:2.3:o:marel:p574_firmware:-:::::::* Remediation No remediation found in references.
marel p574	All versions
CPE cpe:2.3:h:marel:p574:-:::::::* Remediation No remediation found in references.
marel sensorx13 qc flow line firmware	All versions
CPE cpe:2.3:o:marel:sensorx13_qc_flow_line_firmware:-:::::::* Remediation No remediation found in references.
marel sensorx13 qc flow line	All versions
CPE cpe:2.3:h:marel:sensorx13_qc_flow_line:-:::::::* Remediation No remediation found in references.
marel sensorx23 qc master firmware	All versions
CPE cpe:2.3:o:marel:sensorx23_qc_master_firmware:-:::::::* Remediation No remediation found in references.
marel sensorx23 qc master	All versions
CPE cpe:2.3:h:marel:sensorx23_qc_master:-:::::::* Remediation No remediation found in references.
marel sensorx23 qc slave firmware	All versions
CPE cpe:2.3:o:marel:sensorx23_qc_slave_firmware:-:::::::* Remediation No remediation found in references.
marel sensorx23 qc slave	All versions
CPE cpe:2.3:h:marel:sensorx23_qc_slave:-:::::::* Remediation No remediation found in references.
marel speed batcher firmware	All versions
CPE cpe:2.3:o:marel:speed_batcher_firmware:-:::::::* Remediation No remediation found in references.
marel speed batcher	All versions
CPE cpe:2.3:h:marel:speed_batcher:-:::::::* Remediation No remediation found in references.
marel t374 firmware	All versions
CPE cpe:2.3:o:marel:t374_firmware:-:::::::* Remediation No remediation found in references.
marel t374	All versions
CPE cpe:2.3:h:marel:t374:-:::::::* Remediation No remediation found in references.
marel t377 firmware	All versions
CPE cpe:2.3:o:marel:t377_firmware:-:::::::* Remediation No remediation found in references.
marel t377	All versions
CPE cpe:2.3:h:marel:t377:-:::::::* Remediation No remediation found in references.
marel v36 firmware	All versions
CPE cpe:2.3:o:marel:v36_firmware:-:::::::* Remediation No remediation found in references.
marel v36	All versions
CPE cpe:2.3:h:marel:v36:-:::::::* Remediation No remediation found in references.
marel v36b firmware	All versions
CPE cpe:2.3:o:marel:v36b_firmware:-:::::::* Remediation No remediation found in references.
marel v36b	All versions
CPE cpe:2.3:h:marel:v36b:-:::::::* Remediation No remediation found in references.
marel v36c firmware	All versions
CPE cpe:2.3:o:marel:v36c_firmware:-:::::::* Remediation No remediation found in references.
marel v36c	All versions
CPE cpe:2.3:h:marel:v36c:-:::::::* Remediation No remediation found in references.

Change History

7 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
May 13, 2026	CVE Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 9, 2019	CVE Modified	[email protected]
Jul 7, 2017	Initial Analysis	[email protected]
Jul 1, 2017	CVE Modified	[email protected]

CVE-2017-6041 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation