CVE-2017-5144: An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to...

Security readout for executives and security teams

CVE-2017-5144 is an access-control failure in Carlo Gavazzi VMU-C EM before A11_U05 and VMU-C PV before A17. An unauthenticated person could reach most application functions. For organizations using these controllers, the business risk is unauthorized operational access, especially if interfaces are reachable beyond trusted networks. Exposure is most likely where Carlo Gavazzi VMU-C EM or VMU-C PV devices run affected firmware and their web/application interface is reachable from user, vendor, OT, or internet-connected networks. Prioritize remediation if these devices support energy, solar, or operational monitoring and are reachable outside tightly controlled networks. Lack of CVSS does not lower concern because the core issue is broad unauthenticated application access. Mitigation focus: Inventory VMU-C EM and VMU-C PV devices and record firmware versions.; Upgrade VMU-C EM to A11_U05 or later where applicable.; Upgrade VMU-C PV to A17 or later where applicable..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.