cbcvebase.
CVE-2016-4510
published 2016-06-09

CVE-2016-4510: The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to bypass authentication and read arbitrary files…

PriorityP266critical9.1CVSS 3.0
AVNACLPRNUINSUCHIHAN
EPSS
20.10%
97.1th percentile
The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to bypass authentication and read arbitrary files via unspecified vectors.

Affected

54 ranges· showing 25
VendorProductVersion rangeFixed in
trihedralvtscada——
trihedralvtscada——
trihedralvtscada——
trihedralvtscada——
trihedralvtscada——
trihedralvtscada——
trihedralvtscada——
trihedralvtscada——
trihedralvtscada——
trihedralvtscada——
trihedralvtscada——
trihedralvtscada——
trihedralvtscada——
trihedralvtscada——
trihedralvtscada——
trihedralvtscada——
trihedralvtscada——
trihedralvtscada——
trihedralvtscada——
trihedralvtscada——
trihedralvtscada——
trihedralvtscada——
trihedralvtscada——
trihedralvtscada——
trihedralvtscada——

Detection & IOCsextracted from sources · hover to see the quote

port9201/TCP↗
  • →Monitor for unauthenticated file read requests targeting the VTScada WAP interface on port 9201/TCP, which is the attack surface for CVE-2016-4510 (authentication bypass allowing arbitrary file reads). ↗
  • →Flag any inbound connections to port 9201/TCP from untrusted or external networks, as this legacy WAP interface should not be internet-accessible. ↗
  • →Alert on unauthenticated HTTP/WAP requests to VTScada that result in file content responses, particularly from low-privilege or anonymous sources, as exploitation requires low skill. ↗
  • ·CVE-2016-4510 only affects VTScada installations where the WAP interface is enabled. Sites not using this legacy feature are not exposed. ↗
  • ·Affected version range is VTScada versions after Version 8 and before Version 11.2.02; patched version 11.2.02 resolves the authentication bypass. ↗

CVSS provenance

nvdv3.09.1CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
nvdv2.06.4MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.