Vulnerability Description
ABB PCM600 before 2.7 uses an improper hash algorithm for the main application password, which makes it easier for local users to obtain sensitive cleartext information by leveraging read access to the ACTConfig configuration file.
CVSS Score
2.8
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Abb | Pcm600 | <= 2.6 |
Related Weaknesses (CWE)
References
- https://ics-cert.us-cert.gov/advisories/ICSA-16-152-02Third Party AdvisoryUS Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-16-152-02Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2016-4511?
CVE-2016-4511 is a vulnerability with a CVSS score of 2.8 (LOW). ABB PCM600 before 2.7 uses an improper hash algorithm for the main application password, which makes it easier for local users to obtain sensitive cleartext information by leveraging read access to th...
How severe is CVE-2016-4511?
CVE-2016-4511 has been rated LOW with a CVSS base score of 2.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-4511?
Check the references section above for vendor advisories and patch information. Affected products include: Abb Pcm600.