CVE-2016-5789

A Cross-site Request Forgery issue was discovered in JanTek JTC-200, all versions. An attacker could perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request.

• CWE-352

• https://ics-cert.us-cert.gov/advisories/ICSA-17-283-02Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-17-283-02Third Party Advisory, US Government Resource

Published

Oct 13, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-5774The HTTPS server in Blue Coat PacketShaper S-Series 11.5.x b…
• CVE-2016-5781Stack-based buffer overflow in WECON LeviStudio allows remot…
• CVE-2016-5782An issue was discovered in Locus Energy LGate prior to 1.05H…
• CVE-2016-5786An issue was discovered in OmniMetrix OmniView, Version 1.2.…
• CVE-2016-5787General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY…6.3
• CVE-2016-5788General Electric (GE) Bently Nevada 3500/22M USB with firmwa…
• CVE-2016-5790Tollgrade LightHouse SMS before 5.1 patch 3 allows remote at…7.5
• CVE-2016-5791An Improper Authentication issue was discovered in JanTek JT…
• CVE-2016-5792SQL injection vulnerability in Moxa SoftCMS before 1.5 allow…
• CVE-2016-5793Unquoted Windows search path vulnerability in Moxa Active OP…
• CVE-2016-5794Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-5795An XXE issue was discovered in Automated Logic Corporation (…