CVE-2016-0865

High

Published: 13/02/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Tollgrade SmartGrid LightHouse Sensor Management System (SMS) software versions before 5.1 and 4.1.0 Build 16 allow remote authenticated users to change arbitrary passwords via unspecified vectors.

Risk Assessment

This vulnerability may lead to unauthorized access to the system, posing a risk to the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update the software to the latest version to mitigate the risks associated with this vulnerability.

Other vulnerabilities in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software

CVE-2016-0863High
A Cross-site request forgery (CSRF) vulnerability in the Tollgrade SmartGrid LightHouse Sensor Management System allows remote attackers to hijack the authentication of arbitrary users.

Original NVD description (English source)

Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote authenticated users to change arbitrary passwords via unspecified vectors.