Vulnerability CVE-2016-0863

Vulnerability CVE-2016-0863

Published: 2016-02-12 Modified: 2016-02-13

Description:

Cross-site request forgery (CSRF) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to hijack the authentication of arbitrary users.

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:P)

CVSS Base Score	Impact Subscore	Exploitability Subscore
6.8/10	6.4/10	8.6/10

Exploit range	Attack complexity	Authentication
Remote	Medium	No required
Confidentiality impact	Integrity impact	Availability impact
Partial	Partial	Partial

Affected software
Tollgrade -> Smartgrid lighthouse sensor management system

References:

https://ics-cert.us-cert.gov/advisories/ICSA-16-040-01

Copyright 2024, cxsecurity.com