CVE-2016-4523 is a denial-of-service vulnerability affecting the WAP interface in Trihedral VTScada versions 8.x through 11.x prior to 11.2.02. This flaw, rated High severity (CVSS 7.5), allows unauthenticated remote attackers to cause an out-of-bounds read and application crash with low attack complexity. The vulnerability is actively exploited, as indicated by its presence in CISA’s KEV catalog, despite a lack of public exploit code on platforms like Metasploit or ExploitDB. It has garnered significant community discussion and media coverage, highlighting its importance for operational technology security.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 8.0.05, < 11.2.02CPE matchmatch criteria | cpe:2.3:a:trihedral:vtscada:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.