The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to bypass authentication and read arbitrary files via unspecified vectors.
https://ics-cert.us-cert.gov/advisories/ICSA-16-159-01
http://www.zerodayinitiative.com/advisories/ZDI-16-404
http://www.securityfocus.com/bid/91077
Source: Mitre, NVD
Published: 2016-06-09
Updated: 2024-11-21
Base Score: 6.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N
Severity: Medium
Base Score: 9.1
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Severity: Critical