CVE-2016-2274
Last modified
CVE-2016-2274 is a vulnerability of currently unknown severity. An issue was discovered in Adcon Telemetry A850 Telemetry Gateway Base Station. The Web Interface does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output; this could allow for cross-site scripting.. EPSS estimates a 0.83% chance of exploitation in the next 30 days.
Description
An issue was discovered in Adcon Telemetry A850 Telemetry Gateway Base Station. The Web Interface does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output; this could allow for cross-site scripting.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Adcon Telemetry | A850 Telemetry Gateway Base Station Firmware | All versions |
References
- http://www.securityfocus.com/bid/94781Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-16-343-03Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/94781Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-16-343-03Third Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-2274?
How severe is CVE-2016-2274?
How do I fix CVE-2016-2274?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2016
- CVE-2016-2267Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2016-2268Dell SecureWorks app before 2.1 for iOS does not validate SS…
- CVE-2016-2270Xen 4.6.x and earlier allows local guest administrators to c…
- CVE-2016-2271VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix C…
- CVE-2016-2272Eaton Lighting EG2 Web Control 4.04P and earlier allows remo…
- CVE-2016-2273Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2016-2275The web interface on Advantech/B+B SmartWorx VESP211-EU devi…
- CVE-2016-2276Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2016-2277IAB.exe in Rockwell Automation Integrated Architecture Build…
- CVE-2016-2278Schneider Electric Struxureware Building Operations Automati…
- CVE-2016-2279Cross-site scripting (XSS) vulnerability in the web server i…6.1
- CVE-2016-2280Buffer overflow in RDISERVER in Honeywell Uniformance Proces…
Are you affected by CVE-2016-2274?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST