Vulnerability Description
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application's database lacks sufficient safeguards for protecting credentials.
CVSS Score
9.8
CRITICAL
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Lynxspring | Jenesys Bas Bridge | <= 1.1.8 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/94344Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-16-320-01MitigationThird Party AdvisoryUS Government Resource
- http://www.securityfocus.com/bid/94344Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-16-320-01MitigationThird Party AdvisoryUS Government Resource
FAQ
What is CVE-2016-8378?
CVE-2016-8378 is a vulnerability with a CVSS score of 9.8 (CRITICAL). An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application's database lacks sufficient safeguards for protecting credentials.
How severe is CVE-2016-8378?
CVE-2016-8378 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2016-8378?
Check the references section above for vendor advisories and patch information. Affected products include: Lynxspring Jenesys Bas Bridge.