CVE-2016-10710

Severity: high (CVSS 8.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-01-25 · updated 2026-06-17
Weakness: CWE-20

Description

Biscom Secure File Transfer (SFT) 5.0.1000 through 5.0.1048 does not validate the dataFieldId value, and uses sequential numbers, which allows remote authenticated users to overwrite or read files via crafted requests. Version 5.0.1050 contains the fix.

Affected products

Biscom Secure File Transfer: from 5.0.1000 through 5.0.1048

References

http://threat.tevora.com/biscom-secure-file-transfer-arbitrary-file-download/
http://threat.tevora.com/biscom-secure-file-transfer-arbitrary-file-download/

Get alerted when CVE-2016-10710 or the next vulnerability affects your stack