What’s Vulnerable › Vulnerabilities

CVE-2016-4501

• Severity: critical (CVSS 9.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-05-31 · updated 2026-06-17
• Weakness: CWE-284

Description

Environmental Systems Corporation (ESC) 8832 Data Controller 3.02 and earlier mishandles sessions, which allows remote attackers to bypass authentication and make arbitrary configuration changes via unspecified vectors.

Affected products

• Envirosys Esc 8832 Data Controller: through 3.02

References

• https://ics-cert.us-cert.gov/advisories/ICSA-16-147-01
• https://ics-cert.us-cert.gov/advisories/ICSA-16-147-01

Get alerted when CVE-2016-4501 or the next vulnerability affects your stack