Lucene search

K
nvd[email protected]NVD:CVE-2016-8374
HistoryFeb 13, 2017 - 9:59 p.m.

CVE-2016-8374

2017-02-1321:59:01
CWE-400
web.nvd.nist.gov

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

35.6%

An issue was discovered in Schneider Electric Magelis HMI Magelis GTO Advanced Optimum Panels, all versions, Magelis GTU Universal Panel, all versions, Magelis STO5xx and STU Small panels, all versions, Magelis XBT GH Advanced Hand-held Panels, all versions, Magelis XBT GK Advanced Touchscreen Panels with Keyboard, all versions, Magelis XBT GT Advanced Touchscreen Panels, all versions, and Magelis XBT GTW Advanced Open Touchscreen Panels (Windows XPe). An attacker may be able to disrupt a targeted web server, resulting in a denial of service because of UNCONTROLLED RESOURCE CONSUMPTION.

Affected configurations

NVD
Node
schneider-electricmagelis_gtu_universal_panel_firmwareMatch-
AND
schneider-electricmagelis_gtu_universal_panelMatch-
Node
schneider-electricmagelis_gto_advanced_optimum_panel_firmwareMatch-
AND
schneider-electricmagelis_gto_advanced_optimum_panelMatch-
Node
schneider-electricmagelis_sto5_small_panel_firmwareMatch-
AND
schneider-electricmagelis_sto5_small_panelMatch-
Node
schneider-electricmagelis_stu_small_panel_firmwareMatch-
AND
schneider-electricmagelis_stu_small_panelMatch-
Node
schneider-electricmagelis_xbt_gh_advanced_hand-held_panel_firmwareMatch-
AND
schneider-electricmagelis_xbt_gh_advanced_hand-held_panelMatch-
Node
schneider-electricmagelis_xbt_gk_advanced_touchscreen_panel_with_keyboard_firmwareMatch-
AND
schneider-electricmagelis_xbt_gk_advanced_touchscreen_panel_with_keyboardMatch-
Node
schneider-electricmagelis_xbt_gt_advanced_touchscreen_panel_firmwareMatch-
AND
schneider-electricmagelis_xbt_gt_advanced_touchscreen_panelMatch-
Node
schneider-electricmagelis_xbt_gtw_advanced_open_touchscreen_panel_firmwareMatch-
AND
schneider-electricmagelis_xbt_gtw_advanced_open_touchscreen_panelMatch-

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

35.6%