CVE-2016-8357
HighSummary
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. A user with read-only access can send commands to the software and the application will accept those commands.
Risk Assessment
An attacker with read-only access could make changes within the application, potentially leading to unauthorized modifications of data or configuration.
Recommendation
It is recommended to update to the latest version of the software to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Lynxspring JENEsys BAS Bridge
See all- CVE-2016-8369High
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older related to insufficient verification of whether a request was intentionally provided by the user. This leads to a vulnerability to Cross-Site Request Forgery (CSRF) attacks.
- CVE-2016-8361High
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older related to the use of a hard-coded username without a password, allowing an attacker to access the system without authentication.
- CVE-2016-8378Critical
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older related to insufficient safeguards in the application's database for protecting credentials.
Original NVD description (English source)
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. A user with read-only access can send commands to the software and the application will accept those commands. This would allow an attacker with read-only access to make changes within the application.