CVE-2016-10314

High

Published: 03/04/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Devices Jensen of Scandinavia AS Air:Link 3G, Air:Link 5000AC, and Air:Link 59300 have a vulnerability that allows remote attackers to read passwords via a direct request to the x.asp page.

Risk Assessment

Attackers may gain access to sensitive information, potentially leading to unauthorized access to the organization's systems and data.

Recommendation

It is recommended to update the devices to the latest software versions and restrict access to the x.asp page.

Other vulnerabilities in Jensen of Scandinavia AS Air:Link 3G, Air:Link 5000AC, Air:Link 59300

CVE-2016-10312Critical
Devices Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) allow remote attackers to execute arbitrary commands via shell metacharacters to certain /goform/* pages.

Original NVD description (English source)

Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to read passwords via a direct request to the x.asp page.