CVE-2016-4501

9.1 criticalEPSS 1.7%

Environmental Systems Corporation (ESC) 8832 Data Controller 3.02 and earlier mishandles sessions, which allows remote attackers to bypass authentication and make arbitrary configuration changes via unspecified vectors.

Severity

CVSS 3.0

9.1 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2016-05-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

envirosys:esc_8832_data_controller

References

https://ics-cert.us-cert.gov/advisories/ICSA-16-147-01
https://ics-cert.us-cert.gov/advisories/ICSA-16-147-01

Check your stack JSON