CVE-2016-0863

High

Published: 13/02/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A Cross-site request forgery (CSRF) vulnerability in the Tollgrade SmartGrid LightHouse Sensor Management System allows remote attackers to hijack the authentication of arbitrary users.

Risk Assessment

Attackers can exploit this vulnerability to gain unauthorized access to the system, potentially leading to serious data security breaches.

Recommendation

It is recommended to update the software to version 5.1 or 4.1.0 Build 16 to mitigate the risk associated with this vulnerability.

Other vulnerabilities in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS

CVE-2016-0865High
The Tollgrade SmartGrid LightHouse Sensor Management System (SMS) software versions before 5.1 and 4.1.0 Build 16 allow remote authenticated users to change arbitrary passwords via unspecified vectors.

Original NVD description (English source)

Cross-site request forgery (CSRF) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to hijack the authentication of arbitrary users.