CVE-2016-4532

Critical

Published: 09/06/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2016-4532 describes a vulnerability in the WAP interface of Trihedral VTScada in versions 8.x through 11.x before 11.2.02, allowing remote attackers to read arbitrary files via a crafted pathname.

Risk Assessment

This vulnerability may lead to the exposure of sensitive data, posing a significant security risk to the organization.

Recommendation

It is recommended to update Trihedral VTScada to version 11.2.02 or later to mitigate this vulnerability.

Original NVD description (English source)

Directory traversal vulnerability in the WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to read arbitrary files via a crafted pathname.