CVE-2016-5782

CVE-2016-5782 describes an improper input validation vulnerability in the PHP script used for parameter management in Locus Energy LGate devices, including models 50, 100, 101, 120, and 320, prior to firmware version 1.05H. This flaw allows an unauthenticated attacker to manipulate POST requests, leading to high confidentiality impact and low integrity and availability impacts. The vulnerability has a CVSSv3 score of 8.6 (High) due to its network-based attack vector and low attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.