CVE-2016-4494

Cross-site request forgery (CSRF) vulnerability on KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allows remote attackers to hijack the authentication of unspecified victims for requests that disclose the contents of a configuration file.

• CWE-352

• https://ics-cert.us-cert.gov/advisories/ICSA-16-126-01Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-16-126-01Third Party Advisory, US Government Resource

Published

Jun 10, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-4488Use-after-free vulnerability in libiberty allows remote atta…
• CVE-2016-4489Integer overflow in the gnu_special function in libiberty al…
• CVE-2016-4490Integer overflow in cp-demangle.c in libiberty allows remote…
• CVE-2016-4491The d_print_comp function in cp-demangle.c in libiberty allo…
• CVE-2016-4492Buffer overflow in the do_type function in cplus-dem.c in li…
• CVE-2016-4493The demangle_template_value_parm and do_hpacc_template_liter…
• CVE-2016-4495KMC Controls BAC-5051E devices with firmware before E0.2.0.2…
• CVE-2016-4496Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows loca…
• CVE-2016-4497Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows loca…
• CVE-2016-4498Panasonic FPWIN Pro 5.x through 7.x before 7.130 accesses an…
• CVE-2016-4499Heap-based buffer overflow in Panasonic FPWIN Pro 5.x throug…
• CVE-2016-4500Moxa UC-7408 LX-Plus devices allow remote authenticated user…