Vulnerability in Abb Pcm600
CVE-2016-4511
ABB PCM600 before 2.7 uses an improper hash algorithm for the main application password, which makes it easier for local users to obtain sensitive cleartext information by leveraging read access to the ACTConfig configuration file.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.003 (22.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 2.8 (Low). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N.
Affected products
- Abb Pcm600
- N/a — versions n/a
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2016-4511?
- CVE-2016-4511 is a low-severity vulnerability in Abb Pcm600, classified under Cryptographic Issues. CVSS score: 2.8/10. Published 2016-06-10.
- How severe is CVE-2016-4511?
- Low severity. CVSS v3 base score is 2.8 out of 10.