CVE:CVE-2017-6041
CNNVD:CNNVD-201704-318
Marel SensorX25 X-ray Machine等都是冰岛Marel公司的应用于医疗行业的提供各种医学检测的产品。
多款Marel产品中存在任意文件上传漏洞。攻击者可利用该漏洞获取受影响设备的管理员访问权限。以下产品受到影响：Marel SensorX25 X-ray Machine；Marel SensorX23 X-ray Machine；Marel MWS2 Weighing System；Marel MAC4 Controller；Marel M3210 Terminal；Marel M3000 Terminal。
solution:Upgrade marel a320_firmware to a higher version than -; Upgrade marel a325_firmware to a higher version than -; Upgrade marel a371_firmware to a higher version than -; Upgrade marel a520_master_firmware to a higher version than -; Upgrade marel a520_slave_firmware to a higher version than -; Upgrade marel a530_firmware to a higher version than -; Upgrade marel a542_firmware to a higher version than -; Upgrade marel a571_firmware to a higher version than -; Upgrade marel check_bin_grader_firmware to a higher version than -; Upgrade marel flowlineqc_t376_firmware to a higher version than -; Upgrade marel ipm3_dual_cam_firmware to a higher version than 132,139,and avoid the version 132,139; Upgrade marel p520_firmware to a higher version than -; Upgrade marel p574_firmware to a higher version than -; Upgrade marel sensorx13_qc_flow_line_firmware to a higher version than -; Upgrade marel sensorx23_qc_master_firmware to a higher version than -; Upgrade marel sensorx23_qc_slave_firmware to a higher version than -; Upgrade marel speed_batcher_firmware to a higher version than -; Upgrade marel t374_firmware to a higher version than -; Upgrade marel t377_firmware to a higher version than -; Upgrade marel v36_firmware to a higher version than -; Upgrade marel v36b_firmware to a higher version than -; Upgrade marel v36c_firmware to a higher version than -