CRITICAL🇵🇱 Wersja polska

CVE-2016-4532

CVSS 9.1v3.0pub. 2016-06-09upd. 2026-05-06

Directory traversal vulnerability in the WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to read arbitrary files via a crafted pathname.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

  • Trihedral Vtscada

    APP
    Trihedral
    10.0.1110.0.1310.0.1410.0.1610.0.1710.1.0510.1.0610.1.0710.1.1210.2.0510.2.0710.2.0810.2.1110.2.1310.2.14+ 39 more
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Path Traversal
CWE
References

Related vulnerabilities

CVE-2016-4510CRITICAL9.1PL ✓same product

Auth Bypass w interfejsie WAP Trihedral VTScada — odczyt dowolnych plików

CVE-2016-4523HIGH7.5⚠ KEVsame product

The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers ...

CVE-2022-3181HIGH7.5same product

An Improper Input Validation vulnerability exists in Trihedral VTScada version 12.0.38 and prior. A specifical...

CVE-2017-14031HIGH7.8same product

An Improper Access Control issue was discovered in Trihedral VTScada 11.3.03 and prior. A local, non-administr...

CVE-2017-14029HIGH7.8same product

An Uncontrolled Search Path Element issue was discovered in Trihedral VTScada 11.3.03 and prior. The program w...