# CVEs published 2016-09-19 9 CVEs were published on September 19, 2016: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2016-0870](https://cve.now/CVE-2016-0870.md): The web server in Trane Tracer SC 4.2.1134 and earlier allows remote attackers to read sensitive configuration files via a direct request. (no CVSS) - [CVE-2016-1483](https://cve.now/CVE-2016-1483.md): Cisco WebEx Meetings Server 2.6 allows remote attackers to cause a denial of service (CPU consumption) by repeatedly accessing the account-v (no CVSS) - [CVE-2016-4526](https://cve.now/CVE-2016-4526.md): ABB DataManagerPro 1.x before 1.7.1 allows local users to gain privileges by replacing a DLL file in the package directory. (no CVSS) - [CVE-2016-4860](https://cve.now/CVE-2016-4860.md): Yokogawa STARDOM FCN/FCJ controller R1.01 through R4.01 does not require authentication for Logic Designer connections, which allows remote (no CVSS) - [CVE-2016-5814](https://cve.now/CVE-2016-5814.md): Buffer overflow in Rockwell Automation RSLogix Micro Starter Lite, RSLogix Micro Developer, RSLogix 500 Starter Edition, RSLogix 500 Standar (no CVSS) - [CVE-2016-6415](https://cve.now/CVE-2016-6415.md): The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5 (CVSS 7.5, KEV) - [CVE-2016-6535](https://cve.now/CVE-2016-6535.md): AVer Information EH6108H+ devices with firmware X9.03.24.00.07l have hardcoded accounts, which allows remote attackers to obtain root access (no CVSS) - [CVE-2016-6536](https://cve.now/CVE-2016-6536.md): The /setup URI on AVer Information EH6108H+ devices with firmware X9.03.24.00.07l allows remote attackers to bypass intended page-access res (no CVSS) - [CVE-2016-6537](https://cve.now/CVE-2016-6537.md): AVer Information EH6108H+ devices with firmware X9.03.24.00.07l store passwords in a cleartext base64 format and require cleartext credentia (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2016-09-19 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.