CVE-2016-6536

Critical

Published: 19/09/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2016-6536 affects AVer Information EH6108H+ devices with firmware X9.03.24.00.07l, where remote attackers can bypass intended page-access restrictions or modify passwords by leveraging knowledge of a handle parameter value.

Risk Assessment

This vulnerability may lead to unauthorized access to device settings and potential loss of control, posing a significant security risk to the organization.

Recommendation

It is recommended to update the device firmware to the latest version and implement additional security measures to restrict access to critical functions.

Original NVD description (English source)

The /setup URI on AVer Information EH6108H+ devices with firmware X9.03.24.00.07l allows remote attackers to bypass intended page-access restrictions or modify passwords by leveraging knowledge of a handle parameter value.