CVE-2017-11165: Thermofisher DT80 Dex Firmware

Critical severity, CVSS 9.8. EPSS: 63.9% chance of exploitation in the next 30 days.

dataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credential and configuration information via a direct request for the /services/getFile.cmd?userfile=config.xml URI.

Affected products

• Thermofisher DT80 Dex Firmware: version 1.50.012 only

Published 2017-07-12. Last modified 2026-06-17.