Covered by FixVibe
FixVibe verified active scans can identify public Orpak SiteOmat BOS product and version evidence associated with CVE-2017-14854. CISA lists SiteOmat versions prior to 6.4.414.122 as affected by the CGI buffer-overflow advisory and recommends updating to 6.4.414.139 or later [S1]. NVD describes the issue as a stack buffer overflow in a SiteOmat CGI component and lists the affected CPE range as versions before 6.4.414.122 [S2].
What FixVibe checks
The scanner runs only for verified active-scan targets. It sends normal HTTP GET requests to the target, looks for strong SiteOmat BOS product evidence, extracts a public SiteOmat version string, and correlates that version with the public CISA and NVD advisory range.
When the observed version is below 6.4.414.122, FixVibe reports a critical version-based advisory. The finding includes the observed endpoint, version, fingerprint signals, confidence, evidence posture, advisory sources, and a clear boundary between what FixVibe verified and what still needs operator validation.
What FixVibe does not verify
FixVibe does not send crafted CGI input, overflow payloads, crash tests, SSH login attempts, broad port scans, price-changing requests, or exploit requests. It does not authenticate to SiteOmat, inspect configuration, view or edit monitoring/payment data, query field equipment, or prove code execution.
Because public version labels can be stale or served through reverse proxies, operators should validate patch status from trusted device inventory or the vendor-supported management console before treating the finding as confirmed runtime exploitability.
Remediation
Upgrade affected SiteOmat BOS deployments to 6.4.414.122 or newer, preferably 6.4.414.139 or later per CISA/Orpak guidance [S1]. Restrict HTTP and SSH management access to trusted industrial networks, VPN, or an authenticated management segment, disable unnecessary management exposure, and review access logs if the interface was reachable from untrusted networks.