CVE-2016-4495

MEDIUM

KMC Controls Bac-5051e Firmware - Improper Access Control

Title source: rule

Description

KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allow remote attackers to bypass intended access restrictions and read a configuration file via unspecified vectors.

References (1)

Scores

CVSS v3 5.3
EPSS 0.0018
EPSS Percentile 39.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Classification

CWE
CWE-284 CWE-310
Status draft

Affected Products (1)

kmc_controls/bac-5051e_firmware

Timeline

Published Jun 10, 2016
Tracked Since Feb 18, 2026