CVE-2016-4502

High

Published: 31/05/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Environmental Systems Corporation (ESC) 8832 Data Controller version 3.02 and earlier allows remote attackers to bypass intended access restrictions and execute arbitrary functions via a modified parameter.

Risk Assessment

Attackers may gain unauthorized access to the system, potentially leading to serious data breaches and operational disruptions.

Recommendation

It is recommended to update to the latest version of the software to mitigate this vulnerability and implement additional security measures.

Other vulnerabilities in Environmental Systems Corporation (ESC) 8832 Data Controller

CVE-2016-4501Critical
Environmental Systems Corporation (ESC) 8832 Data Controller 3.02 and earlier mishandles sessions, allowing remote attackers to bypass authentication and make arbitrary configuration changes.

Original NVD description (English source)

Environmental Systems Corporation (ESC) 8832 Data Controller 3.02 and earlier allows remote attackers to bypass intended access restrictions and execute arbitrary functions via a modified parameter.