CVEvulnerability

CVE-2016-4532

9.1 CRITICAL Published 2016-06-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-06-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.1 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-22

Description

Directory traversal vulnerability in the WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to read arbitrary files via a crafted pathname.

Affected configurations

• trihedral vtscada 10.1.05 • trihedral vtscada 10.1.06 • trihedral vtscada 10.1.07 • trihedral vtscada 10.1.12 • trihedral vtscada 9.0.02 • trihedral vtscada 9.0.03 • trihedral vtscada 9.0.08 • trihedral vtscada 9.1.02 • trihedral vtscada 9.1.03 • trihedral vtscada 9.1.05 • trihedral vtscada 9.1.09 • trihedral vtscada 9.1.11 • trihedral vtscada 9.1.14 • trihedral vtscada 9.1.20 • trihedral vtscada 11.0.05 • trihedral vtscada 11.0.07 • trihedral vtscada 10.2.05 • trihedral vtscada 10.2.07 • trihedral vtscada 10.2.08 • trihedral vtscada 10.2.11 • trihedral vtscada 10.2.13 • trihedral vtscada 10.2.14 • trihedral vtscada 10.2.15 • trihedral vtscada 10.2.17 • trihedral vtscada 10.2.19 • trihedral vtscada 10.2.20 • trihedral vtscada 10.2.21 • trihedral vtscada 10.2.22 • trihedral vtscada 8.0.05 • trihedral vtscada 8.0.12 • trihedral vtscada 8.0.16 • trihedral vtscada 8.0.18 • trihedral vtscada 8.1.05 • trihedral vtscada 8.1.06 • trihedral vtscada 11.1.05 • trihedral vtscada 11.1.06 • trihedral vtscada 11.1.09 • trihedral vtscada 11.1.10 • trihedral vtscada 11.1.13 • trihedral vtscada 11.1.14 • trihedral vtscada 11.1.15 • trihedral vtscada 11.1.16 • trihedral vtscada 11.1.17 • trihedral vtscada 11.1.18 • trihedral vtscada 11.1.19 • trihedral vtscada 11.1.20 • trihedral vtscada 11.1.21 • trihedral vtscada 11.1.22 • trihedral vtscada 11.1.24 • trihedral vtscada 10.0.11 • trihedral vtscada 10.0.13 • trihedral vtscada 10.0.14 • trihedral vtscada 10.0.16 • trihedral vtscada 10.0.17

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References