ZeroDay Findings
Sign inSign up

Findings

CVE-2017-1000486

Primetek Primefaces Remote Code Execution Vulnerability

Published Jan 3, 2018 · updated Jun 16, 2026 · primetek primefaces

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Jan 3, 2018 · Catalog

    Detected

    Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

  2. Jan 10, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Jul 10, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

Required action

Apply updates per vendor instructions.

CISA due date Jul 10, 2022

Affected

  • cpe primetek/primefacesversion unspecified
  • vendor Primetek Primefaces Applicationversion unspecified

Sources

  • CISA KEVConfirmed exploitationCVE-2017-1000486

    Primetek Primefaces is vulnerable to a weak encryption flaw resulting in remote code execution

    cisa.gov
  • CVE.orgVulnerability recordCVE-2017-1000486

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2017-1000486

    30-day exploitation probability 94.1%

    first.org
  • Exploit DatabasePublic exploit reference43733

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Metasploit ModulesPublic exploit moduleexploit_multi/http/primefaces_weak_encryption_rce

    Public module reference (excellent). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDVulnerability recordCVE-2017-1000486

    Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

    nvd.nist.gov

References