CVE-2016-6567 describes a critical vulnerability in SHDesigns' Resident Download Manager, a discontinued firmware update tool for Rabbit 2000/3000 CPU boards, which are found in some industrial control and embedded systems. The flaw allows a remote attacker to execute arbitrary code on affected devices by sending unauthenticated UDP traffic, due to the manager's failure to verify firmware authenticity. With a CVSS score of 9.8 (CRITICAL), this vulnerability poses a significant risk of complete compromise (confidentiality, integrity, availability). Despite its severity, there is no evidence of active exploitation, public exploit code, or significant community discussion, likely due to the product's discontinuation in 2011.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:shdesigns:resident_download_manager:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.