AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2017-17097

CRITICAL · CVSS 9.8 EPSS 6.95% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-01-02 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

Exhibit — Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
gist.github.com ↗
External Security References
exploit-db.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2017-17097
Severity
CRITICAL
CVSS
9.8
EPSS
6.95%

Original Filing — NVD Description

gps-server.net GPS Tracking Software (self hosted) 2.x has a password reset procedure that immediately resets passwords upon an unauthenticated request, and then sends e-mail with a predictable (date-based) password to the admin, which makes it easier for remote attackers to obtain access by predicting this new password. This is related to the use of gmdate for password creation in fn_connect.php.