Trihedral · VTScada (formerly VTS)

CVE-2016-4523

Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability

Exploited in attacks High 7.5 Attack chance: 31%

What it is

The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via unspecified vectors.

CISA: The WAP interface in Trihedral VTScada (formerly VTS) allows remote attackers to cause a denial-of-service (DoS).

What to do

Apply updates per vendor instructions.

Deadline for US federal agencies: May 6, 2022

Added to the CISA list: April 15, 2022
Published: June 9, 2016
Severity: High 7.5 CVSS 3.1
Chance of attacks in the next 30 days (EPSS): 31% in the top 1.7% of all known vulnerabilities
Weakness: CWE-119
More details: NVD · CVE.org · CISA

All references (3)

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.