CVEs published September 19, 2016
9 CVEs were published on September 19, 2016: 0 critical, 1 high. 1 is now in CISA KEV.
- Published
- 9
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 8
- Now in CISA KEV
- 1
- Fix available
- 0
High 1
Medium, low and unrated 8
- CVE-2016-0870The web server in Trane Tracer SC 4.2.1134 and earlier allows remote attackers to read sensitive configuration files via a direct request.
- CVE-2016-1483Cisco WebEx Meetings Server 2.6 allows remote attackers to cause a denial of service (CPU consumption) by repeatedly accessing the account-v
- CVE-2016-4526ABB DataManagerPro 1.x before 1.7.1 allows local users to gain privileges by replacing a DLL file in the package directory.
- CVE-2016-4860Yokogawa STARDOM FCN/FCJ controller R1.01 through R4.01 does not require authentication for Logic Designer connections, which allows remote
- CVE-2016-5814Buffer overflow in Rockwell Automation RSLogix Micro Starter Lite, RSLogix Micro Developer, RSLogix 500 Starter Edition, RSLogix 500 Standar
- CVE-2016-6535AVer Information EH6108H+ devices with firmware X9.03.24.00.07l have hardcoded accounts, which allows remote attackers to obtain root access
- CVE-2016-6536The /setup URI on AVer Information EH6108H+ devices with firmware X9.03.24.00.07l allows remote attackers to bypass intended page-access res
- CVE-2016-6537AVer Information EH6108H+ devices with firmware X9.03.24.00.07l store passwords in a cleartext base64 format and require cleartext credentia