CVE-2016-4510 The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to bypass authentication and read arbitrary files via unspecified vectors.
CriticalCVSS 9.1
EPSS 20.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to bypass authentication and read arbitrary files via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trihedral vtscada | = 10.1.05 | No fix listed |
| trihedral vtscada | = 10.1.06 | No fix listed |
| trihedral vtscada | = 10.1.07 | No fix listed |
| trihedral vtscada | = 10.1.12 | No fix listed |
| trihedral vtscada | = 10.0.11 | No fix listed |
| trihedral vtscada | = 10.0.13 | No fix listed |
| trihedral vtscada | = 10.0.14 | No fix listed |
| trihedral vtscada | = 10.0.16 | No fix listed |
| trihedral vtscada | = 10.0.17 | No fix listed |
| trihedral vtscada | = 11.1.05 | No fix listed |
| trihedral vtscada | = 11.1.06 | No fix listed |
| trihedral vtscada | = 11.1.09 | No fix listed |
| trihedral vtscada | = 11.1.10 | No fix listed |
| trihedral vtscada | = 11.1.13 | No fix listed |
| trihedral vtscada | = 11.1.14 | No fix listed |
| trihedral vtscada | = 11.1.15 | No fix listed |
| trihedral vtscada | = 11.1.16 | No fix listed |
| trihedral vtscada | = 11.1.17 | No fix listed |
| trihedral vtscada | = 11.1.18 | No fix listed |
| trihedral vtscada | = 11.1.19 | No fix listed |
| trihedral vtscada | = 11.1.20 | No fix listed |
| trihedral vtscada | = 11.1.21 | No fix listed |
| trihedral vtscada | = 11.1.22 | No fix listed |
| trihedral vtscada | = 11.1.24 | No fix listed |
| trihedral vtscada | = 8.0.05 | No fix listed |
Show 29 more
| Product | Affected versions | Fixed in |
|---|---|---|
| trihedral vtscada | = 8.0.12 | No fix listed |
| trihedral vtscada | = 8.0.16 | No fix listed |
| trihedral vtscada | = 8.0.18 | No fix listed |
| trihedral vtscada | = 8.1.05 | No fix listed |
| trihedral vtscada | = 8.1.06 | No fix listed |
| trihedral vtscada | = 10.2.05 | No fix listed |
| trihedral vtscada | = 10.2.07 | No fix listed |
| trihedral vtscada | = 10.2.08 | No fix listed |
| trihedral vtscada | = 10.2.11 | No fix listed |
| trihedral vtscada | = 10.2.13 | No fix listed |
| trihedral vtscada | = 10.2.14 | No fix listed |
| trihedral vtscada | = 10.2.15 | No fix listed |
| trihedral vtscada | = 10.2.17 | No fix listed |
| trihedral vtscada | = 10.2.19 | No fix listed |
| trihedral vtscada | = 10.2.20 | No fix listed |
| trihedral vtscada | = 10.2.21 | No fix listed |
| trihedral vtscada | = 10.2.22 | No fix listed |
| trihedral vtscada | = 9.0.02 | No fix listed |
| trihedral vtscada | = 9.0.03 | No fix listed |
| trihedral vtscada | = 9.0.08 | No fix listed |
| trihedral vtscada | = 9.1.02 | No fix listed |
| trihedral vtscada | = 9.1.03 | No fix listed |
| trihedral vtscada | = 9.1.05 | No fix listed |
| trihedral vtscada | = 9.1.09 | No fix listed |
| trihedral vtscada | = 9.1.11 | No fix listed |
| trihedral vtscada | = 9.1.14 | No fix listed |
| trihedral vtscada | = 9.1.20 | No fix listed |
| trihedral vtscada | = 11.0.05 | No fix listed |
| trihedral vtscada | = 11.0.07 | No fix listed |
References
- 91077 vdb-entry
- www.zerodayinitiative.com
- ics-cert.us-cert.gov third-party-advisory us-government-resource