CVE-2016-10314

Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to read passwords via a direct request to the x.asp page.

• CWE-200

• https://www.riskbasedsecurity.com/research/RBS-2016-004.pdfExploit, Technical Description, Third Party Advisory
• https://www.riskbasedsecurity.com/research/RBS-2016-004.pdfExploit, Technical Description, Third Party Advisory

Published

Apr 3, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-10309In the GUI of Ceragon FibeAir IP-10 (before 7.2.0) devices, …
• CVE-2016-1031Use-after-free vulnerability in Adobe Flash Player before 18…8.8
• CVE-2016-10310Buffer overflow in the MobiLink Synchronization Server compo…
• CVE-2016-10311Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5…
• CVE-2016-10312Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (R…
• CVE-2016-10313Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (R…
• CVE-2016-10315Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (R…
• CVE-2016-10316Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (R…
• CVE-2016-10317The fill_threshhold_buffer function in base/gxht_thresh.c in…
• CVE-2016-10318A missing authorization check in the fscrypt_process_policy …
• CVE-2016-10319In ARM Trusted Firmware 1.2 and 1.3, a malformed firmware up…
• CVE-2016-1032Adobe Flash Player before 18.0.0.343 and 19.x through 21.x b…8.8