Lynxspring JENEsys BAS Bridge vulnerabilities
4 known CVE vulnerabilities in Lynxspring JENEsys BAS Bridge, translated and rated.
- CVE-2016-8369High
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older related to insufficient verification of whether a request was intentionally provided by the user. This leads to a vulnerability to Cross-Site Request Forgery (CSRF) attacks.
- CVE-2016-8361High
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older related to the use of a hard-coded username without a password, allowing an attacker to access the system without authentication.
- CVE-2016-8357High
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. A user with read-only access can send commands to the software and the application will accept those commands.
- CVE-2016-8378Critical
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older related to insufficient safeguards in the application's database for protecting credentials.