Information disclosure in Blackbox Alertwerks Servsensor Contact Eme111a-20-R2
CVE-2016-2311
Black Box AlertWerks ServSensor with firmware before SP473, AlertWerks ServSensor Junior with firmware before SP473, AlertWerks ServSensor Junior with PoE with firmware before SP473, and AlertWerks ServSensor Contact with firmware before SP473 allow remote authenticated users to discover administrator and user passwords via unspecified vectors.
Vulnerability class: Information Disclosure
EPSS: 0.012 (63.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Blackbox Alertwerks_servsensor_contact_eme111a-20-r2
- Blackbox Alertwerks_servsensor_contact_eme111a-60-r2
- Blackbox Alertwerks_servsensor_contact_eme112a-20-r2
- Blackbox Alertwerks_servsensor_contact_eme112a-60-r2
- Blackbox Alertwerks_servsensor_contact_eme113a-20-r2
- Blackbox Alertwerks_servsensor_contact_eme113a-60-r2
- Blackbox Alertwerks_servsensor_contact_firmware
- Blackbox Alertwerks_servsensor_eme105a
- Blackbox _Alertwerks_servsensor_eme106a
- Blackbox _Alertwerks_servsensor_eme108a-r2
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2016-2311?
- CVE-2016-2311 is a medium-severity vulnerability in Blackbox Alertwerks Servsensor Contact Eme111a-20-R2, classified under Information Disclosure. CVSS score: 6.5/10. Published 2016-05-30.
- How severe is CVE-2016-2311?
- Medium severity. CVSS v3 base score is 6.5 out of 10.