CVE-2016-8357 An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. A user with read-only access can send commands to the software and the application will accept those commands. This w...
HighCVSS 7.1
EPSS 0.94%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. A user with read-only access can send commands to the software and the application will accept those commands. This would allow an attacker with read-only access to make changes within the application.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lynxspring jenesys bas bridge | <= 1.1.8 | No fix listed |
References
- 94344 third-party-advisory vdb-entry
- ics-cert.us-cert.gov mitigation third-party-advisory us-government-resource