CVE-2016-4532 Directory traversal vulnerability in the WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to read arbitrary files via a crafted pathname.
CriticalCVSS 9.1
EPSS 27.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in the WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to read arbitrary files via a crafted pathname.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trihedral vtscada | = 10.1.05 | No fix listed |
| trihedral vtscada | = 10.1.06 | No fix listed |
| trihedral vtscada | = 10.1.07 | No fix listed |
| trihedral vtscada | = 10.1.12 | No fix listed |
| trihedral vtscada | = 9.0.02 | No fix listed |
| trihedral vtscada | = 9.0.03 | No fix listed |
| trihedral vtscada | = 9.0.08 | No fix listed |
| trihedral vtscada | = 9.1.02 | No fix listed |
| trihedral vtscada | = 9.1.03 | No fix listed |
| trihedral vtscada | = 9.1.05 | No fix listed |
| trihedral vtscada | = 9.1.09 | No fix listed |
| trihedral vtscada | = 9.1.11 | No fix listed |
| trihedral vtscada | = 9.1.14 | No fix listed |
| trihedral vtscada | = 9.1.20 | No fix listed |
| trihedral vtscada | = 11.0.05 | No fix listed |
| trihedral vtscada | = 11.0.07 | No fix listed |
| trihedral vtscada | = 10.2.05 | No fix listed |
| trihedral vtscada | = 10.2.07 | No fix listed |
| trihedral vtscada | = 10.2.08 | No fix listed |
| trihedral vtscada | = 10.2.11 | No fix listed |
| trihedral vtscada | = 10.2.13 | No fix listed |
| trihedral vtscada | = 10.2.14 | No fix listed |
| trihedral vtscada | = 10.2.15 | No fix listed |
| trihedral vtscada | = 10.2.17 | No fix listed |
| trihedral vtscada | = 10.2.19 | No fix listed |
Show 29 more
| Product | Affected versions | Fixed in |
|---|---|---|
| trihedral vtscada | = 10.2.20 | No fix listed |
| trihedral vtscada | = 10.2.21 | No fix listed |
| trihedral vtscada | = 10.2.22 | No fix listed |
| trihedral vtscada | = 8.0.05 | No fix listed |
| trihedral vtscada | = 8.0.12 | No fix listed |
| trihedral vtscada | = 8.0.16 | No fix listed |
| trihedral vtscada | = 8.0.18 | No fix listed |
| trihedral vtscada | = 8.1.05 | No fix listed |
| trihedral vtscada | = 8.1.06 | No fix listed |
| trihedral vtscada | = 11.1.05 | No fix listed |
| trihedral vtscada | = 11.1.06 | No fix listed |
| trihedral vtscada | = 11.1.09 | No fix listed |
| trihedral vtscada | = 11.1.10 | No fix listed |
| trihedral vtscada | = 11.1.13 | No fix listed |
| trihedral vtscada | = 11.1.14 | No fix listed |
| trihedral vtscada | = 11.1.15 | No fix listed |
| trihedral vtscada | = 11.1.16 | No fix listed |
| trihedral vtscada | = 11.1.17 | No fix listed |
| trihedral vtscada | = 11.1.18 | No fix listed |
| trihedral vtscada | = 11.1.19 | No fix listed |
| trihedral vtscada | = 11.1.20 | No fix listed |
| trihedral vtscada | = 11.1.21 | No fix listed |
| trihedral vtscada | = 11.1.22 | No fix listed |
| trihedral vtscada | = 11.1.24 | No fix listed |
| trihedral vtscada | = 10.0.11 | No fix listed |
| trihedral vtscada | = 10.0.13 | No fix listed |
| trihedral vtscada | = 10.0.14 | No fix listed |
| trihedral vtscada | = 10.0.16 | No fix listed |
| trihedral vtscada | = 10.0.17 | No fix listed |
References
- 91077 vdb-entry
- www.zerodayinitiative.com
- ics-cert.us-cert.gov third-party-advisory us-government-resource