# CVEs published 2016-08-24

7 CVEs were published on August 24, 2016: 0 critical, 1 high. Days are UTC.

- [CVE-2016-7089](https://cve.now/CVE-2016-7089.md): WatchGuard RapidStream appliances allow local users to gain privileges and execute arbitrary commands via a crafted ifconfig command, aka… (no CVSS)
- [CVE-2016-6909](https://cve.now/CVE-2016-6909.md): Buffer overflow in the Cookie parser in Fortinet FortiOS 4.x before 4.1.11, 4.2.x before 4.2.13, and 4.3.x before 4.3.9 and FortiSwitch… (no CVSS)
- [CVE-2016-5081](https://cve.now/CVE-2016-5081.md): ZModo ZP-NE14-S and ZP-IBH-13W devices have a hardcoded root password, which makes it easier for remote attackers to obtain access via a… (no CVSS)
- [CVE-2016-5645](https://cve.now/CVE-2016-5645.md): Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32BXBA devices have a… (CVSS 7.3)
- [CVE-2016-5650](https://cve.now/CVE-2016-5650.md): ZModo ZP-NE14-S and ZP-IBH-13W devices do not enforce a WPA2 configuration setting, which allows remote attackers to trigger association… (no CVSS)
- [CVE-2016-5799](https://cve.now/CVE-2016-5799.md): Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication… (no CVSS)
- [CVE-2016-5812](https://cve.now/CVE-2016-5812.md): Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 use cleartext password storage, which makes… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2016-08-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.