What is CVE-2016-10314?

CVE-2016-10314 is a high-severity vulnerability in Jensenofscandinavia Al3g, classified under Information Disclosure. CVSS score: 8.8/10. Published 2017-04-03.

How severe is CVE-2016-10314?

High severity. CVSS v3 base score is 8.8 out of 10.

Information disclosure in Jensenofscandinavia Al3g

CVE-2016-10314

Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to read passwords via a direct request to the x.asp page.

Vulnerability class: Information Disclosure

EPSS: 0.012 (64.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Jensenofscandinavia Al3g
Jensenofscandinavia Al3g_firmware — versions 2.23m
Jensenofscandinavia Al5000ac
Jensenofscandinavia Al5000ac_firmware — versions 1.13
Jensenofscandinavia Al59300
Jensenofscandinavia Al59300_firmware — versions 1.04
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (Technical Description, Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2016-10314?: CVE-2016-10314 is a high-severity vulnerability in Jensenofscandinavia Al3g, classified under Information Disclosure. CVSS score: 8.8/10. Published 2017-04-03.
How severe is CVE-2016-10314?: High severity. CVSS v3 base score is 8.8 out of 10.