9.1crit
CVE-2016-4510in critical feed
The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to bypass authentication and…
Published 10 y ago · modified 4 mo ago · JSON
CVSS
9.1
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
20.1%
percentile 97%
Public exploits
0
none known
Summary
The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to bypass authentication and read arbitrary files via unspecified vectors.
Exploit prediction (EPSS)
20.10% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 9.1 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
| NVD | 2.0 | 6.4 | AV:N/AC:L/Au:N/C:P/I:P/A:N |
Classification
- Weakness
- CWE-287 Improper Authentication
References
- zerodayinitiative.com /advisories/ZDI-16-404 · x_refsource_MISC, x_transferred
- ics-cert.us-cert.gov /advisories/ICSA-16-159-01 · x_refsource_MISC, x_transferred
- securityfocus.com /bid/91077 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2016-4510
- NVD: CVE-2016-4510
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.