CVE-2016-6531

CVE-2016-6531 describes a critical vulnerability in Open Dental 16.1 and earlier, where a hardcoded MySQL root password allows remote attackers to gain administrative access via intranet TCP port 3306. This vulnerability carries a CVSS v3 score of 9.8 (Critical) due to its network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While the vendor disputes the "hardcoded" aspect, stating it's a default blank password that can be changed, the potential for unauthorized administrative access remains significant if not addressed. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.