CVE-2016-4506

Cross-site request forgery (CSRF) vulnerability on Resource Data Management (RDM) Intuitive 650 TDB Controller devices before 2.1.24 allows remote authenticated users to hijack the authentication of arbitrary users.

• CWE-352

• https://ics-cert.us-cert.gov/advisories/ICSA-16-140-01Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-16-140-01Third Party Advisory, US Government Resource

Published

May 31, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-4500Moxa UC-7408 LX-Plus devices allow remote authenticated user…
• CVE-2016-4501Environmental Systems Corporation (ESC) 8832 Data Controller…
• CVE-2016-4502Environmental Systems Corporation (ESC) 8832 Data Controller…
• CVE-2016-4503Moxa Device Server Web Console 5232-N allows remote attacker…9.8
• CVE-2016-4504A Cross-Site Request Forgery issue was discovered in Meteoco…
• CVE-2016-4505Resource Data Management (RDM) Intuitive 650 TDB Controller …
• CVE-2016-4507SQL injection vulnerability in Rexroth Bosch BLADEcontrol-We…6.4
• CVE-2016-4508Cross-site scripting (XSS) vulnerability in Rexroth Bosch BL…6.1
• CVE-2016-4509Heap-based buffer overflow in elcsoft.exe in Eaton ELCSoft 2…
• CVE-2016-4510The WAP interface in Trihedral VTScada (formerly VTS) 8.x th…
• CVE-2016-4511ABB PCM600 before 2.7 uses an improper hash algorithm for th…
• CVE-2016-4512Stack-based buffer overflow in ELCSimulator in Eaton ELCSoft…