CVEvulnerability

CVE-2016-4501

9.1 CRITICAL Published 2016-05-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-05-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.1 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-284

Description

Environmental Systems Corporation (ESC) 8832 Data Controller 3.02 and earlier mishandles sessions, which allows remote attackers to bypass authentication and make arbitrary configuration changes via unspecified vectors.

Affected configurations

• envirosys esc 8832 data controller (<= 3.02)

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References