American Auto-Matrix Front-End Solutions Vulnerabilities

OVERVIEW Independent researcher Maxim Rupp has identified a local file inclusion and a plain text storage of password vulnerabilities in American Auto-Matrix’s Building Automation Front-End Solutions application. The Aspect-Matrix hardware platform was made end of life in 2015 and will no longer...

CVE-2016-2307

CVE-2016-2307 affects American Auto-Matrix Building Automation Front-End Solutions: specifically the Aspect-Nexus Building Automation Front-End Solutions app versions prior to 3.0.0 and the Aspect-Matrix Front-End Solutions app (all versions). The vulnerability stems from Local File Inclusion (CW...