CVE-2016-4510
critical · 9.1The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to bypass authentication and read arbitrary files via unspecified vectors.
9.1
CVSS
20.1%
EPSS (exploit prob.)
97th
EPSS percentile
2016-06-09
Published
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-287
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| trihedral | vtscada | 10.1.05 |
| trihedral | vtscada | 10.1.06 |
| trihedral | vtscada | 10.1.07 |
| trihedral | vtscada | 10.1.12 |
| trihedral | vtscada | 10.0.11 |
| trihedral | vtscada | 10.0.13 |
| trihedral | vtscada | 10.0.14 |
| trihedral | vtscada | 10.0.16 |
| trihedral | vtscada | 10.0.17 |
| trihedral | vtscada | 11.1.05 |
| trihedral | vtscada | 11.1.06 |
| trihedral | vtscada | 11.1.09 |
| trihedral | vtscada | 11.1.10 |
| trihedral | vtscada | 11.1.13 |
| trihedral | vtscada | 11.1.14 |
| trihedral | vtscada | 11.1.15 |
| trihedral | vtscada | 11.1.16 |
| trihedral | vtscada | 11.1.17 |
| trihedral | vtscada | 11.1.18 |
| trihedral | vtscada | 11.1.19 |
| trihedral | vtscada | 11.1.20 |
| trihedral | vtscada | 11.1.21 |
| trihedral | vtscada | 11.1.22 |
| trihedral | vtscada | 11.1.24 |
| trihedral | vtscada | 8.0.05 |
| trihedral | vtscada | 8.0.12 |
| trihedral | vtscada | 8.0.16 |
| trihedral | vtscada | 8.0.18 |
| trihedral | vtscada | 8.1.05 |
| trihedral | vtscada | 8.1.06 |
| trihedral | vtscada | 10.2.05 |
| trihedral | vtscada | 10.2.07 |
| trihedral | vtscada | 10.2.08 |
| trihedral | vtscada | 10.2.11 |
| trihedral | vtscada | 10.2.13 |
| trihedral | vtscada | 10.2.14 |
| trihedral | vtscada | 10.2.15 |
| trihedral | vtscada | 10.2.17 |
| trihedral | vtscada | 10.2.19 |
| trihedral | vtscada | 10.2.20 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2016-4510