NVD

Id
20126  
Name
CVE-2016-4501  
Description
Environmental Systems Corporation (ESC) 8832 Data Controller 3.02 and earlier mishandles sessions, which allows remote attackers to bypass authentication and make arbitrary configuration changes via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-05-30  
Modified Date
2016-06-07  
Seq
2016-4501  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
109886 20126 CVE-2016-4501 https://ics-cert.us-cert.gov/advisories/ICSA-16-147-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2191 JVNDB-2016-002964 Environmental Systems Corporation 8832 Data Controller おける認証を回避される脆弱性 Environmental Systems Corporation (ESC) 8832 Data Controller は、セッションを誤って処理するため、認証を回避され、任意の設定を変更される脆弱性が存在します。 CVE-2016-4501 91007 CVE-2016-4501 20126 6.4 9.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002964.html 2016-05-26 2016-06-02 View