# CVEs published 2016-09-19 9 CVEs were published on September 19, 2016: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2016-0870](https://cve.now/CVE-2016-0870.md): The web server in Trane Tracer SC 4.2.1134 and earlier allows remote attackers to read sensitive configuration files via a direct request. (no CVSS) - [CVE-2016-1483](https://cve.now/CVE-2016-1483.md): Cisco WebEx Meetings Server 2.6 allows remote attackers to cause a denial of service (CPU consumption) by repeatedly accessing the… (no CVSS) - [CVE-2016-4526](https://cve.now/CVE-2016-4526.md): ABB DataManagerPro 1.x before 1.7.1 allows local users to gain privileges by replacing a DLL file in the package directory. (no CVSS) - [CVE-2016-4860](https://cve.now/CVE-2016-4860.md): Yokogawa STARDOM FCN/FCJ controller R1.01 through R4.01 does not require authentication for Logic Designer connections, which allows… (no CVSS) - [CVE-2016-5814](https://cve.now/CVE-2016-5814.md): Buffer overflow in Rockwell Automation RSLogix Micro Starter Lite, RSLogix Micro Developer, RSLogix 500 Starter Edition, RSLogix 500… (no CVSS) - [CVE-2016-6415](https://cve.now/CVE-2016-6415.md): The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5 (CVSS 7.5, KEV) - [CVE-2016-6535](https://cve.now/CVE-2016-6535.md): AVer Information EH6108H+ devices with firmware X9.03.24.00.07l have hardcoded accounts, which allows remote attackers to obtain root… (no CVSS) - [CVE-2016-6536](https://cve.now/CVE-2016-6536.md): The /setup URI on AVer Information EH6108H+ devices with firmware X9.03.24.00.07l allows remote attackers to bypass intended page-access… (no CVSS) - [CVE-2016-6537](https://cve.now/CVE-2016-6537.md): AVer Information EH6108H+ devices with firmware X9.03.24.00.07l store passwords in a cleartext base64 format and require cleartext… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2016-09-19 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.