Lucene search

[email protected]CVE-2016-4532

HistoryJun 09, 2016 - 10:59 a.m.

CVE-2016-4532

2016-06-0910:59:05

CWE-22

[email protected]

web.nvd.nist.gov

cve-2016-4532

directory traversal

trihedral vtscada

vulnerability

security

nvd

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

8.9 High

AI Score

Confidence

High

0.364 Low

EPSS

Percentile

97.2%

JSON

Directory traversal vulnerability in the WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to read arbitrary files via a crafted pathname.

Affected configurations

NVD

Node

trihedralvtscadaMatch10.1.05

trihedralvtscadaMatch10.1.06

trihedralvtscadaMatch10.1.07

trihedralvtscadaMatch10.1.12

Node

trihedralvtscadaMatch9.0.02

trihedralvtscadaMatch9.0.03

trihedralvtscadaMatch9.0.08

trihedralvtscadaMatch9.1.02

trihedralvtscadaMatch9.1.03

trihedralvtscadaMatch9.1.05

trihedralvtscadaMatch9.1.09

trihedralvtscadaMatch9.1.11

trihedralvtscadaMatch9.1.14

trihedralvtscadaMatch9.1.20

Node

trihedralvtscadaMatch11.0.05

trihedralvtscadaMatch11.0.07

Node

trihedralvtscadaMatch10.2.05

trihedralvtscadaMatch10.2.07

trihedralvtscadaMatch10.2.08

trihedralvtscadaMatch10.2.11

trihedralvtscadaMatch10.2.13

trihedralvtscadaMatch10.2.14

trihedralvtscadaMatch10.2.15

trihedralvtscadaMatch10.2.17

trihedralvtscadaMatch10.2.19

trihedralvtscadaMatch10.2.20

trihedralvtscadaMatch10.2.21

trihedralvtscadaMatch10.2.22

Node

trihedralvtscadaMatch8.0.05

trihedralvtscadaMatch8.0.12

trihedralvtscadaMatch8.0.16

trihedralvtscadaMatch8.0.18

trihedralvtscadaMatch8.1.05

trihedralvtscadaMatch8.1.06

Node

trihedralvtscadaMatch11.1.05

trihedralvtscadaMatch11.1.06

trihedralvtscadaMatch11.1.09

trihedralvtscadaMatch11.1.10

trihedralvtscadaMatch11.1.13

trihedralvtscadaMatch11.1.14

trihedralvtscadaMatch11.1.15

trihedralvtscadaMatch11.1.16

trihedralvtscadaMatch11.1.17

trihedralvtscadaMatch11.1.18

trihedralvtscadaMatch11.1.19

trihedralvtscadaMatch11.1.20

trihedralvtscadaMatch11.1.21

trihedralvtscadaMatch11.1.22

trihedralvtscadaMatch11.1.24

Node

trihedralvtscadaMatch10.0.11

trihedralvtscadaMatch10.0.13

trihedralvtscadaMatch10.0.14

trihedralvtscadaMatch10.0.16

trihedralvtscadaMatch10.0.17

CPENameOperatorVersion
trihedral:vtscadatrihedral vtscadaeq10.1.05
trihedral:vtscadatrihedral vtscadaeq10.1.06
trihedral:vtscadatrihedral vtscadaeq10.1.07
trihedral:vtscadatrihedral vtscadaeq10.1.12

CPE	Name	Operator	Version
trihedral:vtscada	trihedral vtscada	eq	10.1.05
trihedral:vtscada	trihedral vtscada	eq	10.1.06
trihedral:vtscada	trihedral vtscada	eq	10.1.07
trihedral:vtscada	trihedral vtscada	eq	10.1.12

References

www.securityfocus.com/bid/91077

www.zerodayinitiative.com/advisories/ZDI-16-403

ics-cert.us-cert.gov/advisories/ICSA-16-159-01

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

8.9 High

AI Score

Confidence

High

0.364 Low

EPSS

Percentile

97.2%

JSON

Related for CVE-2016-4532

zdi1 cvelist1 nvd1 prion1 ics1 nessus1