CAREL PlantVisor Enhanced Authentication Bypass Vulnerability

OVERVIEW Independent researcher Maxim Rupp has identified an authorization bypass vulnerability in CAREL’s PlantVisor application. CAREL has confirmed that this vulnerability refers to the phased-out CAREL product PlantVisorEnhanced and is no longer supported. This vulnerability could be exploite...

CVE-2016-0867

CAREL PlantVisorEnhanced (phased-out and no longer supported) contains an authorization bypass vulnerability (CVE-2016-0867) that allows remote attackers to bypass access restrictions by requesting a specific file. The issue is exploitable remotely with network access and no user interaction, per...