CVE-2016-4523

The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service...

Basic Information

CVE State: PUBLISHED
Reserved Date: May 05, 2016
Published Date: June 09, 2016
Last Updated: February 07, 2025
Vendor: Trihedral
Product: VTScada
Description: The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via unspecified vectors.
Tags

CVSS Scores

CVSS v3.1

7.5 - HIGH

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0

5.0

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

SSVC Information

Exploitation: active
Automatable: Yes
Technical Impact: partial

Exploit Status

Exploited in the Wild: Yes (2022-04-15 00:00:00 UTC) Source

References

https://ics-cert.us-cert.gov/advisories/ICSA-16-159-01 http://www.securityfocus.com/bid/91077 http://www.zerodayinitiative.com/advisories/ZDI-16-405

Known Exploited Vulnerability Information

Source	Added Date
CISA	2022-04-15 00:00:00 UTC

Timeline

CVE ID Reserved

May 05, 2016
CVE Published to Public

June 09, 2016
Added to KEVIntel

April 15, 2022