CVE-2016-4502

HIGH

envirosys ESC 8832 Data Controller < 3.02 - Unauthenticated Arbitrary Function Execution via Parameter Modification

Title source: llm

Description

Environmental Systems Corporation (ESC) 8832 Data Controller 3.02 and earlier allows remote attackers to bypass intended access restrictions and execute arbitrary functions via a modified parameter.

References (1)

Core 1

Core References

Third Party Advisory, US Government Resource x_refsource_misc

https://ics-cert.us-cert.gov/advisories/ICSA-16-147-01

Scores

CVSS v3 7.5

EPSS 0.0156

EPSS Percentile 72.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-284

Status published

Products (1)

envirosys/esc_8832_data_controller < 3.02

Published May 31, 2016

Tracked Since Feb 18, 2026