CVE-2016-2289 in WebHMI

Summary

Directory traversal vulnerability in ICONICS WebHMI 9 and earlier allows remote attackers to read configuration files, and consequently discover password hashes, via unspecified vectors.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservation: 02/09/2016
• Disclosure: 04/01/2016
• Moderation: VulDB entry created
• Entries: 1: VDB-81561
• CPE: ready
• CWE: CWE-22 (Confirmed)
• CVSS: 7.5
• EPSS: 0.00818
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-2289
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-2289
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-2289/