Lucene search

[email protected]CVE-2016-2298

HistoryMay 14, 2016 - 4:59 p.m.

CVE-2016-2298

2016-05-1416:59:04

CWE-200

[email protected]

web.nvd.nist.gov

cve-2016-2298

meteocontrol

web'log

basic 100

light

pro

pro unlimited

remote attackers

sensitive information

unspecified vectors

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.3%

JSON

Meteocontrol WEB’log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to obtain sensitive cleartext information via unspecified vectors.

Affected configurations

NVD

Node

meteocontrolweb\'log_basic_100Match-

meteocontrolweb\'log_lightMatch-

meteocontrolweb\'log_proMatch-

meteocontrolweb\'log_pro_unlimitedMatch-

CPENameOperatorVersion
meteocontrol:web\'log_basic_100meteocontrol web'log basic 100eq-
meteocontrol:web\'log_lightmeteocontrol web'log lighteq-
meteocontrol:web\'log_prometeocontrol web'log proeq-
meteocontrol:web\'log_pro_unlimitedmeteocontrol web'log pro unlimitedeq-

CPE	Name	Operator	Version
meteocontrol:web\'log_basic_100	meteocontrol web'log basic 100	eq	-
meteocontrol:web\'log_light	meteocontrol web'log light	eq	-
meteocontrol:web\'log_pro	meteocontrol web'log pro	eq	-
meteocontrol:web\'log_pro_unlimited	meteocontrol web'log pro unlimited	eq	-

References

seclists.org/fulldisclosure/2016/May/52

ics-cert.us-cert.gov/advisories/ICSA-16-133-01

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.3%

JSON

Related for CVE-2016-2298

prion1 cvelist1 nvd1 ics2