CVE-2016-4523
Published 2016-06-09 · Updated 2026-06-17 · Source ics-cert@hq.dhs.gov
Summary
CVE-2016-4523 is a high-severity (CVSS 7.5) vulnerability in Trihedral VTScada (formerly VTS). CISA added it to the Known Exploited Vulnerabilities catalog on April 15, 2022, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by May 6, 2022. CISA does not currently list it as used in ransomware campaigns.
All 1 known-exploited Trihedral vulnerabilities →Description
The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via unspecified vectors.
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA Known-Exploited Vulnerability
Product: Trihedral — VTScada (formerly VTS)
Name: Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability
Date added: 2022-04-15 · Due: 2022-05-06
Required action: Apply updates per vendor instructions.
References
- http://www.securityfocus.com/bid/91077
- http://www.zerodayinitiative.com/advisories/ZDI-16-405
- https://ics-cert.us-cert.gov/advisories/ICSA-16-159-01
- http://www.securityfocus.com/bid/91077
- http://www.zerodayinitiative.com/advisories/ZDI-16-405
- https://ics-cert.us-cert.gov/advisories/ICSA-16-159-01
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-4523