CVE-2016-4532
critical · 9.1Directory traversal vulnerability in the WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to read arbitrary files via a crafted pathname.
9.1
CVSS
27.6%
EPSS (exploit prob.)
98th
EPSS percentile
2016-06-09
Published
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-22
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| trihedral | vtscada | 10.1.05 |
| trihedral | vtscada | 10.1.06 |
| trihedral | vtscada | 10.1.07 |
| trihedral | vtscada | 10.1.12 |
| trihedral | vtscada | 9.0.02 |
| trihedral | vtscada | 9.0.03 |
| trihedral | vtscada | 9.0.08 |
| trihedral | vtscada | 9.1.02 |
| trihedral | vtscada | 9.1.03 |
| trihedral | vtscada | 9.1.05 |
| trihedral | vtscada | 9.1.09 |
| trihedral | vtscada | 9.1.11 |
| trihedral | vtscada | 9.1.14 |
| trihedral | vtscada | 9.1.20 |
| trihedral | vtscada | 11.0.05 |
| trihedral | vtscada | 11.0.07 |
| trihedral | vtscada | 10.2.05 |
| trihedral | vtscada | 10.2.07 |
| trihedral | vtscada | 10.2.08 |
| trihedral | vtscada | 10.2.11 |
| trihedral | vtscada | 10.2.13 |
| trihedral | vtscada | 10.2.14 |
| trihedral | vtscada | 10.2.15 |
| trihedral | vtscada | 10.2.17 |
| trihedral | vtscada | 10.2.19 |
| trihedral | vtscada | 10.2.20 |
| trihedral | vtscada | 10.2.21 |
| trihedral | vtscada | 10.2.22 |
| trihedral | vtscada | 8.0.05 |
| trihedral | vtscada | 8.0.12 |
| trihedral | vtscada | 8.0.16 |
| trihedral | vtscada | 8.0.18 |
| trihedral | vtscada | 8.1.05 |
| trihedral | vtscada | 8.1.06 |
| trihedral | vtscada | 11.1.05 |
| trihedral | vtscada | 11.1.06 |
| trihedral | vtscada | 11.1.09 |
| trihedral | vtscada | 11.1.10 |
| trihedral | vtscada | 11.1.13 |
| trihedral | vtscada | 11.1.14 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2016-4532