CVE-2016-2298
CriticalSummary
Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allow remote attackers to obtain sensitive cleartext information via unspecified vectors.
Risk Assessment
Attackers may gain access to confidential data, potentially leading to breaches of privacy and security for the organization.
Recommendation
It is recommended to update the software to the latest version and monitor system access to detect potential attack attempts.
Other vulnerabilities in Meteocontrol WEB'log Basic 100, Light, Pro, Pro Unlimited
See all- CVE-2016-2297Critical
Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to execute arbitrary commands via an 'access command shell-like feature.'
- CVE-2016-2296Critical
Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for 'post-admin' login pages, allowing remote attackers to obtain sensitive information or modify data via unspecified vectors.
Original NVD description (English source)
Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to obtain sensitive cleartext information via unspecified vectors.