CVE-2016-2311
Last modified
CVE-2016-2311 is a vulnerability of currently unknown severity. Black Box AlertWerks ServSensor with firmware before SP473, AlertWerks ServSensor Junior with firmware before SP473, AlertWerks ServSensor Junior with PoE with firmware before SP473, and AlertWerks ServSensor Contact with firmware before SP473 allow remote authenticated users to discover administrator and user passwords via unspecified vectors.. EPSS estimates a 1.15% chance of exploitation in the next 30 days.
Description
Black Box AlertWerks ServSensor with firmware before SP473, AlertWerks ServSensor Junior with firmware before SP473, AlertWerks ServSensor Junior with PoE with firmware before SP473, and AlertWerks ServSensor Contact with firmware before SP473 allow remote authenticated users to discover administrator and user passwords via unspecified vectors.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Blackbox | Alertwerks Servsensor Junior Firmware | All versions |
| Blackbox | Alertwerks Servsensor Contact Firmware | All versions |
| Blackbox | Alertwerks Servsensor Firmware | All versions |
References
- https://ics-cert.us-cert.gov/advisories/ICSA-16-147-03Third Party Advisory, US Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-16-147-03Third Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-2311?
How severe is CVE-2016-2311?
How do I fix CVE-2016-2311?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2016
- CVE-2016-2305Cross-site scripting (XSS) vulnerability in Ecava IntegraXor…
- CVE-2016-2306The HMI web server in Ecava IntegraXor before 5.0 build 4522…
- CVE-2016-2307American Auto-Matrix Aspect-Nexus Building Automation Front-…
- CVE-2016-2308American Auto-Matrix Aspect-Nexus Building Automation Front-…
- CVE-2016-2309iRZ RUH2 before 2b does not validate firmware patches, which…
- CVE-2016-2310General Electric (GE) Multilink ML800, ML1200, ML1600, and M…9.8
- CVE-2016-2312Turning all screens off in Plasma-workspace and kscreenlocke…
- CVE-2016-2313auth_login.php in Cacti before 0.8.8g allows remote authenti…
- CVE-2016-2314GlobespanVirata ftpd 1.0, as used on Huawei SmartAX MT882 de…
- CVE-2016-2315revision.c in git before 2.7.4 uses an incorrect integer dat…9.8
- CVE-2016-2316chan_sip in Asterisk Open Source 1.8.x, 11.x before 11.21.1,…
- CVE-2016-2317Multiple buffer overflows in GraphicsMagick 1.3.23 allow rem…
Are you affected by CVE-2016-2311?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST