CVE-2016-8357

Name of the Vulnerable Software and Affected Versions Lynxspring JENEsys BAS Bridge versions 1.1.8 and older

Description A user with read-only access can send commands to the software, and the application will accept those commands, allowing an attacker to make changes within the application.

Recommendations For versions 1.1.8 and older, restrict access to the software to prevent users with read-only access from sending commands. As a temporary workaround, consider disabling command execution for users with read-only access until a patch is available.