CVE-2016-10571

CVE-2016-10571 affects bkjs-wand versions below 0.3.2, a Node.js module providing ImageMagick wand support, by downloading binary resources over insecure HTTP. This vulnerability allows for Man-in-the-Middle (MITM) attacks, potentially leading to remote code execution (RCE) if an attacker intercepts and replaces the requested binary. With a CVSS score of 8.1 (HIGH), it presents a significant risk due to its network-based attack vector and high impact on confidentiality, integrity, and availability, despite high attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion, indicating a low current exploitation status.