CVE-2016-10316

Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to conduct Open Redirect attacks via the return-url parameter to /goform/formLogout.

• CWE-601

• https://www.riskbasedsecurity.com/research/RBS-2016-004.pdfExploit, Technical Description, Third Party Advisory
• https://www.riskbasedsecurity.com/research/RBS-2016-004.pdfExploit, Technical Description, Third Party Advisory

Published

Apr 3, 2017

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-10310Buffer overflow in the MobiLink Synchronization Server compo…
• CVE-2016-10311Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5…
• CVE-2016-10312Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (R…
• CVE-2016-10313Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (R…
• CVE-2016-10314Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (R…
• CVE-2016-10315Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (R…
• CVE-2016-10317The fill_threshhold_buffer function in base/gxht_thresh.c in…
• CVE-2016-10318A missing authorization check in the fscrypt_process_policy …
• CVE-2016-10319In ARM Trusted Firmware 1.2 and 1.3, a malformed firmware up…
• CVE-2016-1032Adobe Flash Player before 18.0.0.343 and 19.x through 21.x b…8.8
• CVE-2016-10320textract before 1.5.0 allows OS Command Injection attacks vi…
• CVE-2016-10321web2py before 2.14.6 does not properly check if a host is de…