CVE-2016-4523

Timeline

Detection, updates, and resolution for this record.

1. Jun 9, 2016 · Catalog

   Detected

   The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via unspecified vectors.

2. Apr 15, 2022 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. May 6, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via unspecified vectors.

Affected

• cpe trihedral/vtscadaversion unspecified
• vendor Trihedral VTScada (formerly VTS)version unspecified

Sources

• CISA KEVCVE-2016-4523

  The WAP interface in Trihedral VTScada (formerly VTS) allows remote attackers to cause a denial-of-service (DoS).

  cisa.gov
• CVE.orgCVE-2016-4523

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2016-4523

  30-day exploitation probability 31.2%

  first.org
• NIST NVDCVE-2016-4523

  The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via unspecified vectors.

  nvd.nist.gov

References

• Broken Link · securityfocus.com
• Third Party Advisory · zerodayinitiative.com
• Third Party Advisory · ics-cert.us-cert.gov
• CISA note · nvd.nist.gov
• US Government Resource · cisa.gov