CVE-2017-5168: An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior.

Security readout for executives and security teams

CVE-2017-5168 affects Hanwha Techwin Smart Security Manager and could let an attacker read files from the server and potentially execute code. The source description ties the flaw to the bundled ActiveMQ Broker service and a malicious-page scenario. Public severity scoring is absent in the bundle, but the stated impact is serious. Exposure is likely limited to organizations running Hanwha Techwin Smart Security Manager versions described as 1.5 and prior, with conflicting wording also referencing 1.4 and prior to 1.31. Systems hosting the bundled ActiveMQ Broker service are the relevant assets to identify. Prioritize asset discovery and containment for any affected Smart Security Manager servers. The business risk is unauthorized access to server files and possible remote code execution on systems that may support physical security operations. Mitigation focus: Inventory all Smart Security Manager deployments and record exact versions.; Check Hanwha and ICS-CERT guidance for supported fixed versions or vendor mitigations.; Restrict access to the Smart Security Manager and bundled ActiveMQ services..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.