CVE-2016-2311

6.5 mediumEPSS 1.2%

Medium (6.5) in blackbox. EPSS 1.2% chance of exploitation in the next 30 days.

Black Box AlertWerks ServSensor with firmware before SP473, AlertWerks ServSensor Junior with firmware before SP473, AlertWerks ServSensor Junior with PoE with firmware before SP473, and AlertWerks ServSensor Contact with firmware before SP473 allow remote authenticated users to discover administrator and user passwords via unspecified vectors.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWEs: CWE-200, CWE-255
Published: 2016-05-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

blackbox:alertwerks_servsensor_contact_firmware
blackbox:alertwerks_servsensor_firmware
blackbox:alertwerks_servsensor_junior_firmware

References

https://ics-cert.us-cert.gov/advisories/ICSA-16-147-03
https://ics-cert.us-cert.gov/advisories/ICSA-16-147-03

Check your stack JSON