CVE-2016-5815

An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX series, ION8650 series, ION8800 series, and PM5XXX series. No authentication is configured by default. An unauthorized user can access the device management portal and make configuration changes.

• CWE-284

• http://www.securityfocus.com/bid/94091Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-16-308-03Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/94091Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-16-308-03Third Party Advisory, US Government Resource

Published

Feb 13, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-5809An issue was discovered on Schneider Electric IONXXXX series…
• CVE-2016-5810upAdminPg.asp in Advantech WebAccess before 8.1_20160519 all…
• CVE-2016-5811An issue was discovered in Visonic PowerLink2, all versions …6.1
• CVE-2016-5812Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G32…
• CVE-2016-5813An issue was discovered in Visonic PowerLink2, all versions …
• CVE-2016-5814Buffer overflow in Rockwell Automation RSLogix Micro Starter…
• CVE-2016-5816A Use of Hard-Coded Cryptographic Key issue was discovered i…
• CVE-2016-5817SQL injection vulnerability in news pages in Cargotec Navis …
• CVE-2016-5818An issue was discovered in Schneider Electric PowerLogic PM8…
• CVE-2016-5819Moxa G3100V2 Series, editions prior to Version 2.8, and OnCe…
• CVE-2016-5820Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-5821Huawei HiSuite before 4.0.4.204_ove (Out of China) and befor…