CVE-2016-2308

American Auto-Matrix Aspect-Nexus Building Automation Front-End Solutions application before 3.0.0 and Aspect-Matrix Building Automation Front-End Solutions application store passwords in cleartext, which allows remote attackers to obtain sensitive information by reading a file.

• https://ics-cert.us-cert.gov/advisories/ICSA-16-273-01-0Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-16-273-01-0Third Party Advisory, US Government Resource

Published

Oct 5, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-2302Ecava IntegraXor before 5.0 build 4522 allows remote attacke…
• CVE-2016-2303CRLF injection vulnerability in Ecava IntegraXor before 5.0 …
• CVE-2016-2304Ecava IntegraXor before 5.0 build 4522 does not include the …
• CVE-2016-2305Cross-site scripting (XSS) vulnerability in Ecava IntegraXor…
• CVE-2016-2306The HMI web server in Ecava IntegraXor before 5.0 build 4522…
• CVE-2016-2307American Auto-Matrix Aspect-Nexus Building Automation Front-…
• CVE-2016-2309iRZ RUH2 before 2b does not validate firmware patches, which…
• CVE-2016-2310General Electric (GE) Multilink ML800, ML1200, ML1600, and M…9.8
• CVE-2016-2311Black Box AlertWerks ServSensor with firmware before SP473, …
• CVE-2016-2312Turning all screens off in Plasma-workspace and kscreenlocke…
• CVE-2016-2313auth_login.php in Cacti before 0.8.8g allows remote authenti…
• CVE-2016-2314GlobespanVirata ftpd 1.0, as used on Huawei SmartAX MT882 de…