CVE-2016-4524 — MEDIUM (6.5)

Q: What is CVE-2016-4524?

CVE-2016-4524 is a vulnerability with a CVSS score of 6.5 (MEDIUM). ABB PCM600 before 2.7 improperly stores OPC Server IEC61850 passwords in unspecified temporary circumstances, which allows local users to obtain sensitive information via unknown vectors.

Q: How severe is CVE-2016-4524?

CVE-2016-4524 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2016-4524?

Check the references section above for vendor advisories and patch information. Affected products include: Abb Pcm600.

Vulnerability Description

ABB PCM600 before 2.7 improperly stores OPC Server IEC61850 passwords in unspecified temporary circumstances, which allows local users to obtain sensitive information via unknown vectors.

CVSS Score

6.5

MEDIUM

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Abb	Pcm600	<= 2.6

Related Weaknesses (CWE)

CWE-310 CWE-284

References

https://ics-cert.us-cert.gov/advisories/ICSA-16-152-02Third Party AdvisoryUS Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-16-152-02Third Party AdvisoryUS Government Resource

FAQ

What is CVE-2016-4524?

CVE-2016-4524 is a vulnerability with a CVSS score of 6.5 (MEDIUM). ABB PCM600 before 2.7 improperly stores OPC Server IEC61850 passwords in unspecified temporary circumstances, which allows local users to obtain sensitive information via unknown vectors.

How severe is CVE-2016-4524?

CVE-2016-4524 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-4524?

Check the references section above for vendor advisories and patch information. Affected products include: Abb Pcm600.