CVE-2016-2298

CRITICAL

Meteocontrol Web'log Basic 100 - Information Disclosure

Title source: rule

Description

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to obtain sensitive cleartext information via unspecified vectors.

Exploits (1)

metasploit WORKING POC
rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/meteocontrol_weblog_extractadmin.rb

References (2)

Scores

CVSS v3 9.8
EPSS 0.7303
EPSS Percentile 98.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-200
Status published
Products (4)
meteocontrol/web\'log_basic_100
meteocontrol/web\'log_light
meteocontrol/web\'log_pro
meteocontrol/web\'log_pro_unlimited
Published May 14, 2016
Tracked Since Feb 18, 2026