CVE-2017-5167: An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter.

Security readout for executives and security teams

This CVE describes a BINOM3 electric power quality meter where users cannot change their own passwords. That creates an operational security problem: credentials may remain unchanged after personnel changes, suspected compromise, or routine rotation needs. The source bundle does not provide severity scoring, a patch version, or evidence of active exploitation. Exposure is limited to organizations that deployed BINOM3 Electric Power Quality Meters. Risk depends on whether the device’s management interface is reachable by users, administrators, vendor support, or network segments where credentials could be misused. Prioritize this where BINOM3 meters support critical operations or have broad management access. The issue is not proven actively exploited in the bundle, but weak credential lifecycle control can increase business risk during staff turnover or credential incidents. Mitigation focus: Check the ICS-CERT advisory and vendor guidance for supported remediation.; Inventory BINOM3 meters and identify who can authenticate to them.; Restrict management access to only required trusted networks and administrators..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.