1. Home
  2. CVE Database
  3. CVE-2016-10710
HIGH · 8.1

CVE-2016-10710

Biscom Secure File Transfer (SFT) 5.0.1000 through 5.0.1048 does not validate the dataFieldId value, and uses sequential numbers, which allows remote authenticated users to overwrite or read files via...

Vulnerability Description

Biscom Secure File Transfer (SFT) 5.0.1000 through 5.0.1048 does not validate the dataFieldId value, and uses sequential numbers, which allows remote authenticated users to overwrite or read files via crafted requests. Version 5.0.1050 contains the fix.

CVSS Score

8.1

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
BiscomSecure File Transfer>= 5.0.1000, <= 5.0.1048

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2016-10710?

CVE-2016-10710 is a vulnerability with a CVSS score of 8.1 (HIGH). Biscom Secure File Transfer (SFT) 5.0.1000 through 5.0.1048 does not validate the dataFieldId value, and uses sequential numbers, which allows remote authenticated users to overwrite or read files via...

How severe is CVE-2016-10710?

CVE-2016-10710 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-10710?

Check the references section above for vendor advisories and patch information. Affected products include: Biscom Secure File Transfer.