CVE-2016-4523
published 2016-06-09CVE-2016-4523: The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read…
PriorityP275high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
KEVITW
CISA Known Exploited Vulnerabilitydue 2022-05-06
Exploited in the wild
EPSS
31.39%
98.1th percentile
The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via unspecified vectors.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| trihedral | vtscada | >= 8.0.05 < 11.2.02 | 11.2.02 |
Detection & IOCsextracted from sources · hover to see the quote
- →Monitor for anomalous or malformed requests to the VTScada WAP interface on Port 9201/TCP, which is the attack surface for this out-of-bounds read DoS vulnerability. ↗
- →An attacker with low skill can exploit this remotely with no authentication required (CVSS: AV:N/AC:L/PR:N/UI:N), so any unexpected crash or out-of-bounds read on the WAP interface process should be treated as a potential exploitation attempt. ↗
- →Alert on unexpected application crashes of the VTScada server process via the WAP interface, particularly those requiring manual relaunch, as this is the described impact of successful exploitation. ↗
- ·The vulnerable WAP interface is a legacy feature used by only a small fraction of VTScada deployments; confirm whether Port 9201/TCP is exposed before prioritizing detection efforts. ↗
- ·Affected versions span VTScada 8.x through 11.x before 11.2.02; versions at or above 11.2.02 are patched. ↗
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
vulncheck7.5HIGH
cisa7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA
Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability
cisa·2022-04-15·CVSS 7.5
CVE-2016-4523 [HIGH] CWE-119 Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability
Vulnerability: Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability
Affected: Trihedral VTScada (formerly VTS)
The WAP interface in Trihedral VTScada (formerly VTS) allows remote attackers to cause a denial-of-service (DoS).
Required Action: Apply updates per vendor instructions.
Notes: https://nvd.nist.gov/vuln/detail/CVE-2016-4523
Remediation Due Date: 2022-05-06
CISA ICS
Trihedral Engineering Limited VTScada Vulnerabilities
cisa_ics·2018-08-23
Trihedral Engineering Limited VTScada Vulnerabilities
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Trihedral Engineering Limited VTScada Vulnerabilities
Last RevisedAugust 23, 2018
Alert CodeICSA-16-159-01
## OVERVIEW
An anonymous researcher has identified several vulnerabilities in Trihedral Engineering Ltd.’s Trihedral VTScada and reported them to Zero Day Initiative (ZDI), which reported them to NCCIC/ICS-CERT. Trihedral Engineering Ltd. has produced a new version to mitigate these vulnerabilities.
These vulnerabilities could be exploited remotely.
## AFFECTED PRODUCTS
Trihedral Engineering Ltd. reports that these vulnerabilities affect the following product:
- VTScada
VulDB
Trihedral VTScada up to 11.2.01 WAP Interface memory corruption (ID 370077 / BID-91077)
vuldb·2026-04-23·CVSS 7.5
CVE-2016-4523 [HIGH] Trihedral VTScada up to 11.2.01 WAP Interface memory corruption (ID 370077 / BID-91077)
A vulnerability was found in Trihedral VTScada up to 11.2.01. It has been declared as problematic. This issue affects some unknown processing of the component WAP Interface. The manipulation results in memory corruption.
This vulnerability was named CVE-2016-4523. The attack may be performed from remote. In addition, an exploit is available.
It is recommended to upgrade the affected component.
GHSA
GHSA-rp9v-r63v-9vfg: The WAP interface in Trihedral VTScada (formerly VTS) 8
ghsa_unreviewed·2022-05-17
CVE-2016-4523 [HIGH] CWE-119 GHSA-rp9v-r63v-9vfg: The WAP interface in Trihedral VTScada (formerly VTS) 8
The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via unspecified vectors.
VulnCheck
Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability
vulncheck·2016·CVSS 7.5
CVE-2016-4523 [HIGH] CWE-119 Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability
Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability
The WAP interface in Trihedral VTScada (formerly VTS) allows remote attackers to cause a denial-of-service (DoS).
Affected: Trihedral VTScada (formerly VTS)
Required Action: Apply updates per vendor instructions.
Exploitation References: https://blog.checkpoint.com/security/december-2021s-most-wanted-malware-trickbot-emotet-and-the-log4j-plague/; https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json; https://blog.checkpoint.com/security/april-2022s-most-wanted-malware-a-shake-up-in-the-index-but-emotet-is-still-on-top/; https://blog.checkpoint.com/security/april-2024s-most-wanted-malware-surge-in-androxgh0st-attacks-and-the-decline-of-lockbit3/; https://blog.checkpoint.com/research/may-2024s-
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/91077http://www.zerodayinitiative.com/advisories/ZDI-16-405https://ics-cert.us-cert.gov/advisories/ICSA-16-159-01http://www.securityfocus.com/bid/91077http://www.zerodayinitiative.com/advisories/ZDI-16-405https://ics-cert.us-cert.gov/advisories/ICSA-16-159-01https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-4523
2016-06-09
Published
2022-04-15
Added to CISA KEV
Exploited in the wild