{"id":"CVE-2017-5136","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-5136","generatedAt":"2026-10-28T22:18:46.105Z","title":"The application failed to check the access control of the request which could result in an attacker being able to shutdown the system.","description":"An issue was discovered on SendQuick Entera and Avera devices before 2HF16. The application failed to check the access control of the request which could result in an attacker being able to shutdown the system.","published":"2017-02-05T18:59:00.000Z","lastModified":"2026-06-17T01:20:02.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.0","score":7.5,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-862"],"affected":["sendquick/entera sms gateway firmware","sendquick/avera sms gateway firmware"],"epss":{"score":0.01791,"percentile":0.78262,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.79%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://www.securityfocus.com/bid/96031","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"https://niantech.io/blog/2017/02/05/vulns-multiple-vulns-in-sendquick-entera-avera-sms-gateway-appliances/","tags":["Third Party Advisory","URL Repurposed"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/96031","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://niantech.io/blog/2017/02/05/vulns-multiple-vulns-in-sendquick-entera-avera-sms-gateway-appliances/","tags":["Third Party Advisory","URL Repurposed"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-5136","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}