HIGH🚩 CISA KEV⚡ EXPLOIT🇵🇱 Wersja polska

CVE-2016-4523

CVSS 7.5v3.1pub. 2016-06-09upd. 2026-04-22

The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via unspecified vectors.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Trihedral Vtscada

    APP
    Trihedral
    8.0.05 – 11.2.02 (excl.)

CISA KEV — detailsi

Vendori
Trihedral
Producti
VTScada (formerly VTS)
Added to KEVi
April 15, 2022
Remediation deadline (US Federal)i
May 6, 2022(overdue)
Required action (CISA)i

Apply updates per vendor instructions.

CISA descriptioni

The WAP interface in Trihedral VTScada (formerly VTS) allows remote attackers to cause a denial-of-service (DoS).

🔴
IMMEDIATE ACTION
Actively exploited in the wild (CISA KEV). Patch immediately.
⏰CISA DEADLINE: 6 maja 2022
Tags
DoSMemory
CWE
References

Related vulnerabilities

CVE-2016-4510CRITICAL9.1PL ✓same product

Auth Bypass w interfejsie WAP Trihedral VTScada — odczyt dowolnych plików

CVE-2016-4532CRITICAL9.1PL ✓same product

Path Traversal w interfejsie WAP Trihedral VTScada – odczyt dowolnych plików

CVE-2022-3181HIGH7.5same product

An Improper Input Validation vulnerability exists in Trihedral VTScada version 12.0.38 and prior. A specifical...

CVE-2017-14031HIGH7.8same product

An Improper Access Control issue was discovered in Trihedral VTScada 11.3.03 and prior. A local, non-administr...

CVE-2017-14029HIGH7.8same product

An Uncontrolled Search Path Element issue was discovered in Trihedral VTScada 11.3.03 and prior. The program w...