Lucene search

IcscertCVE-2016-2293

HistoryApr 21, 2016 - 11:00 a.m.

CVE-2016-2293

2016-04-2111:00:10

CWE-264

icscert

web.nvd.nist.gov

cve-2016-2293

axm-net module

accuenergy

firmware 3.08

remote attackers

discover settings

security vulnerability

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

AI Score

8.4

Confidence

High

EPSS

0.006

Percentile

78.2%

JSON

The AXM-NET module in Accuenergy Acuvim II NET Firmware 3.08 and Acuvim IIR NET Firmware 3.08 allows remote attackers to discover settings via a direct request to an unspecified URL.

Affected configurations

Nvd

Node

accuenergyacuvim_iirMatch-

AND

accuenergyacuvim_iir_net_firmwareRange≤3.08

Node

accuenergyacuvim_iiMatch-

AND

accuenergyacuvim_ii_net_firmwareRange≤3.08

VendorProductVersionCPE
accuenergyacuvim_iir-cpe:2.3:h:accuenergy:acuvim_iir:-:*:*:*:*:*:*:*
accuenergyacuvim_iir_net_firmware*cpe:2.3:o:accuenergy:acuvim_iir_net_firmware:*:*:*:*:*:*:*:*
accuenergyacuvim_ii-cpe:2.3:h:accuenergy:acuvim_ii:-:*:*:*:*:*:*:*
accuenergyacuvim_ii_net_firmware*cpe:2.3:o:accuenergy:acuvim_ii_net_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
accuenergy	acuvim_iir	-	cpe:2.3:h:accuenergy:acuvim_iir:-:::::::*
accuenergy	acuvim_iir_net_firmware	*	cpe:2.3:o:accuenergy:acuvim_iir_net_firmware::::::::
accuenergy	acuvim_ii	-	cpe:2.3:h:accuenergy:acuvim_ii:-:::::::*
accuenergy	acuvim_ii_net_firmware	*	cpe:2.3:o:accuenergy:acuvim_ii_net_firmware::::::::

References

ics-cert.us-cert.gov/advisories/ICSA-16-105-02

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

AI Score

8.4

Confidence

High

EPSS

0.006

Percentile

78.2%

JSON

Related for CVE-2016-2293