CVE-2016-2307

High

Description

American Auto-Matrix Aspect-Nexus Building Automation Front-End Solutions application before 3.0.0 and Aspect-Matrix Building Automation Front-End Solutions application allow remote attackers to read arbitrary files via unspecified vectors, as demonstrated by the configuration file.

SeverityHigh
CVSS7.5
Exploit probability—
ProductAmerican Auto-matrix Aspect-matrix Building Automation Front-end Solutions Application
PublishedOct 5, 2016
First seenOct 5, 2016

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
american_auto-matrix aspect-matrix_building_automation_front-end_solutions_applicationNo range specified—
american_auto-matrix aspect-nexus_building_automation_front-end_solutions_applicationv ≤ 2.0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2016-2307 · American Auto-matrix Aspect-matrix Building Automation Front-end Solutions Application · Dark Radar