← back
CVE-2016-2296

CVE-2016-2296

EPSS 64.4%
Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pages, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/39822/unverifiedexploitdbwww.exploit-db.com/exploits/39822unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://seclists.org/fulldisclosure/2016/May/52https://ics-cert.us-cert.gov/advisories/ICSA-16-133-01https://www.exploit-db.com/exploits/39822/