CVE-2016-10601

CVE-2016-10601 describes a Man-in-the-Middle (MITM) vulnerability in the uxebu webdrvr npm package, which downloads binary resources over unencrypted HTTP. This allows an attacker to intercept and replace legitimate binaries with malicious ones. The vulnerability carries a CVSS v3 score of 8.1 (High), indicating a high potential for remote code execution (RCE) with high impact on confidentiality, integrity, and availability, though it requires high attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.