CVE-2017-5164: An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter.

Security readout for executives and security teams

CVE-2017-5164 is a cross-site scripting issue in the BINOM3 Universal Multifunctional Electric Power Quality Meter. A malicious client can send input that the server does not properly verify, allowing script code to run in another user’s browser session. Public sources do not provide a CVSS score, confirmed exploitation, or a named patch in the supplied bundle. Exposure is most likely where BINOM3 meter management or web interfaces are reachable by operators, vendors, or untrusted networks. Internet exposure would raise concern, but the supplied sources do not confirm default network placement or reachable services. Treat this as a targeted operational technology exposure review, not an emergency without further evidence. Prioritize if BINOM3 devices are reachable from broad internal networks, vendor remote access, or the internet. Mitigation focus: Inventory BINOM3 Electric Power Quality Meter deployments and management interfaces.; Check the ICS-CERT advisory and vendor guidance for available fixes or configuration actions.; Restrict management access to trusted administrative networks only..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.