CVSS 3.0
9.4 criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:LCVE-2016-2296
Critical (9.4) in meteocontrol. EPSS 64% chance of exploitation in the next 30 days.
Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pages, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
Severity
- EPSS
- 64% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- CWE
- CWE-254
- Published
- Modified
- Record from
- the NVD, synced
Affected
- meteocontrol:web\'log_basic_100
- meteocontrol:web\'log_light
- meteocontrol:web\'log_pro
- meteocontrol:web\'log_pro_unlimited