CVE-2016-2951

3.7 lowEPSS 0.7%

Low (3.7) in ibm bigfix remote control. EPSS 0.7% chance of exploitation in the next 30 days.

IBM BigFix Remote Control before 9.1.3 does not properly set the default encryption strength, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data.

Severity

CVSS 3.0

3.7 low

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
CWE: CWE-310
Published: 2016-11-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:bigfix_remote_control

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IV89785
http://www-01.ibm.com/support/docview.wss?uid=swg21991885
http://www.securityfocus.com/bid/94601
http://www-01.ibm.com/support/docview.wss?uid=swg1IV89785
http://www-01.ibm.com/support/docview.wss?uid=swg21991885

Check your stack JSON