CVE-2016-0865

Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote authenticated users to change arbitrary passwords via unspecified vectors.

• CWE-255

• https://ics-cert.us-cert.gov/advisories/ICSA-16-040-01Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-16-040-01Third Party Advisory, US Government Resource

Published

Feb 13, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-0859Integer overflow in the Kernel service in Advantech WebAcces…
• CVE-2016-0860Buffer overflow in the BwpAlarm subsystem in Advantech WebAc…
• CVE-2016-0861General Electric (GE) Industrial Solutions UPS SNMP/Web Adap…
• CVE-2016-0862General Electric (GE) Industrial Solutions UPS SNMP/Web Adap…
• CVE-2016-0863Cross-site request forgery (CSRF) vulnerability in Tollgrade…
• CVE-2016-0864Tollgrade SmartGrid LightHouse Sensor Management System (SMS…
• CVE-2016-0866Cross-site scripting (XSS) vulnerability in Tollgrade SmartG…
• CVE-2016-0867CAREL PlantVisorEnhanced allows remote attackers to bypass i…
• CVE-2016-0868Stack-based buffer overflow on Rockwell Automation Allen-Bra…
• CVE-2016-0869Heap-based buffer overflow in MICROSYS PROMOTIC before 8.3.1…
• CVE-2016-0870The web server in Trane Tracer SC 4.2.1134 and earlier allow…
• CVE-2016-0871Eaton Lighting EG2 Web Control 4.04P and earlier allows remo…