VULNERABILITY INTELLIGENCE

CVE-2017-9626

CVSS score9.8 CRITICAL

EPSS probability1.95%

CISA KEVNot currently listed

Published2019-03-27

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Systems using the Marel Food Processing Systems Pluto platform do not restrict remote access. Marel has created an update for Pluto-based applications. This update will restrict remote access by implementing SSH authentication.

Weakness classification

CWE-284: Improper Access Control
CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references

ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource