CVE-2017-5145: An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to...

Security readout for executives and security teams

CVE-2017-5145 is a CSRF flaw in Carlo Gavazzi VMU-C EM and VMU-C PV devices. If an authorized user is tricked into a malicious web interaction, an attacker may cause unauthorized device configuration changes. The public bundle does not provide a CVSS score or evidence of active exploitation. Exposure is likely limited to organizations operating Carlo Gavazzi VMU-C EM or VMU-C PV devices on affected firmware. Risk depends on whether users access device administration interfaces and whether those interfaces are reachable from untrusted networks. Treat this as a targeted operational technology configuration integrity issue. Prioritize sites using the affected Carlo Gavazzi devices, especially where device administration is broadly reachable. Urgency is moderate unless the devices support safety-critical or business-critical monitoring functions. Mitigation focus: Inventory VMU-C EM and VMU-C PV devices and record firmware versions.; Update VMU-C EM to A11_U05 or later where applicable.; Update VMU-C PV to A17 or later where applicable..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.