CVE-2016-8361 An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application uses a hard-coded username with no password allowing an attacker into the system without authenticati...
HighCVSS 8.6
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application uses a hard-coded username with no password allowing an attacker into the system without authentication.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lynxspring jenesys bas bridge | <= 1.1.8 | No fix listed |
References
- 94344 third-party-advisory vdb-entry
- ics-cert.us-cert.gov mitigation third-party-advisory us-government-resource