Lucene search

[email protected]CVE-2016-4510

HistoryJun 09, 2016 - 10:59 a.m.

CVE-2016-4510

2016-06-0910:59:00

CWE-287

[email protected]

web.nvd.nist.gov

cve-2016-4510

wap interface

trihedral vtscada

vts

authentication bypass

file read

remote attackers

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

9.2 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.196 Low

EPSS

Percentile

96.3%

JSON

The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to bypass authentication and read arbitrary files via unspecified vectors.

CPENameOperatorVersion
trihedral:vtscadatrihedral vtscadaeq10.1.07
trihedral:vtscadatrihedral vtscadaeq10.1.12
trihedral:vtscadatrihedral vtscadaeq10.1.05
trihedral:vtscadatrihedral vtscadaeq10.1.06
trihedral:vtscadatrihedral vtscadaeq10.0.11
trihedral:vtscadatrihedral vtscadaeq10.0.13
trihedral:vtscadatrihedral vtscadaeq10.0.16
trihedral:vtscadatrihedral vtscadaeq10.0.14
trihedral:vtscadatrihedral vtscadaeq10.0.17
trihedral:vtscadatrihedral vtscadaeq11.1.13

CPE	Name	Operator	Version
trihedral:vtscada	trihedral vtscada	eq	10.1.07
trihedral:vtscada	trihedral vtscada	eq	10.1.12
trihedral:vtscada	trihedral vtscada	eq	10.1.05
trihedral:vtscada	trihedral vtscada	eq	10.1.06
trihedral:vtscada	trihedral vtscada	eq	10.0.11
trihedral:vtscada	trihedral vtscada	eq	10.0.13
trihedral:vtscada	trihedral vtscada	eq	10.0.16
trihedral:vtscada	trihedral vtscada	eq	10.0.14
trihedral:vtscada	trihedral vtscada	eq	10.0.17
trihedral:vtscada	trihedral vtscada	eq	11.1.13

Rows per page:

1-10 of 541

References

www.securityfocus.com/bid/91077

www.zerodayinitiative.com/advisories/ZDI-16-404

ics-cert.us-cert.gov/advisories/ICSA-16-159-01

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

9.2 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.196 Low

EPSS

Percentile

96.3%

JSON

Related for CVE-2016-4510

prion1 cvelist1 zdi1 nessus1 ics1