CVE-2016-10670

CVE-2016-10670 describes a vulnerability in the windows-seleniumjar-mirror project where it insecurely downloads binary resources over HTTP, making it susceptible to Man-in-the-Middle (MITM) attacks. An attacker could exploit this by intercepting and replacing the legitimate Selenium Jar file with a malicious version, potentially leading to remote code execution (RCE) on the affected system. This vulnerability is rated as HIGH severity with a CVSS score of 8.1, indicating a high potential for impact (confidentiality, integrity, and availability) with high attack complexity, requiring an attacker to be on the network. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE. It is not listed in the CISA KEV catalog, and its EPSS score is very low, suggesting a low probability of exploitation in the wild.