What’s Vulnerable › Vulnerabilities

CVE-2016-4525

• Severity: medium (CVSS 6.6 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-06-25 · updated 2026-06-17

Description

Unspecified ActiveX controls in Advantech WebAccess before 8.1_20160519 allow remote authenticated users to obtain sensitive information or modify data via unknown vectors, related to the INTERFACESAFE_FOR_UNTRUSTED_CALLER (aka safe for scripting) flag.

Affected products

• Advantech WebAccess: through 8.1

References

• https://ics-cert.us-cert.gov/advisories/ICSA-16-173-01
• https://ics-cert.us-cert.gov/advisories/ICSA-16-173-01

Get alerted when CVE-2016-4525 or the next vulnerability affects your stack