CVE-2016-5650

ZModo ZP-NE14-S and ZP-IBH-13W devices do not enforce a WPA2 configuration setting, which allows remote attackers to trigger association with an arbitrary access point by using a recognized SSID value.

• CWE-284

• http://www.kb.cert.org/vuls/id/301735Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/92449
• http://www.kb.cert.org/vuls/id/301735Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/92449

Published

Aug 24, 2016

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-5642Opmantek NMIS before 8.5.12G has XSS via SNMP.
• CVE-2016-5645Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L3…7.3
• CVE-2016-5646An exploitable heap overflow vulnerability exists in the Com…
• CVE-2016-5647The igdkmd64 module in the Intel Graphics Driver through 15.…
• CVE-2016-5648Acer Portal app before 3.9.4.2000 for Android does not prope…
• CVE-2016-5649A vulnerability is in the 'BSW_cxttongr.htm' page of the Net…
• CVE-2016-5652An exploitable heap-based buffer overflow exists in the hand…
• CVE-2016-5653Multiple SQL injection vulnerabilities in Misys FusionCapita…
• CVE-2016-5654Misys FusionCapital Opics Plus allows remote authenticated u…
• CVE-2016-5655Misys FusionCapital Opics Plus does not verify X.509 certifi…
• CVE-2016-5660Cross-site scripting (XSS) vulnerability in AttachmentsList.…6.1
• CVE-2016-5661Accela Civic Platform Citizen Access portal relies on the cl…