PT-2016-5110

CVE-2016-2307

·

Publicado

2016-10-05

·

Atualizado

2016-10-05

Descrição por

CVSS 3.1
7.5
Alta
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions American Auto-Matrix Aspect-Nexus Building Automation Front-End Solutions application versions prior to 3.0.0 Aspect-Matrix Building Automation Front-End Solutions application versions prior to 3.0.0
Description The issue allows remote attackers to read arbitrary files via unspecified vectors, as demonstrated by the configuration file.
Recommendations For American Auto-Matrix Aspect-Nexus Building Automation Front-End Solutions application versions prior to 3.0.0, update to version 3.0.0 or later. For Aspect-Matrix Building Automation Front-End Solutions application versions prior to 3.0.0, update to version 3.0.0 or later.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Identificadores relacionados
CVE-2016-2307
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com