CVE-2016-2951

Severity: low (CVSS 3.7 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-11-30 · updated 2026-06-17
Weakness: CWE-310

Description

IBM BigFix Remote Control before 9.1.3 does not properly set the default encryption strength, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data.

Affected products

IBM BigFix Remote Control: through 9.1.2

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IV89785
http://www-01.ibm.com/support/docview.wss?uid=swg21991885
http://www.securityfocus.com/bid/94601
http://www-01.ibm.com/support/docview.wss?uid=swg1IV89785
http://www-01.ibm.com/support/docview.wss?uid=swg21991885
http://www.securityfocus.com/bid/94601

Get alerted when CVE-2016-2951 or the next vulnerability affects your stack