CVE-2016-10224

7.2 highEPSS 1.2%

An issue was discovered in Sauter NovaWeb web HMI. The application uses a protection mechanism that relies on the existence or values of a cookie, but it does not properly ensure that the cookie is valid for the associated user.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-254
Published: 2017-02-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sauter-controls:novaweb_web_hmi

References

https://ics-cert.us-cert.gov/advisories/ICSA-16-343-02
https://ics-cert.us-cert.gov/advisories/ICSA-16-343-02

Check your stack JSON