PT-2016-5112 · Irz · Irz Ruh2

Published 2016-05-30 · Updated 2017-01-10 · CVE-2016-2309

Positive Technologies (AI Summary)

CVSS v2.0

8.0

High

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions iRZ RUH2 version before 2b

Description The issue allows remote authenticated users to modify data or cause a denial of service via unspecified vectors due to a lack of validation of firmware patches.

Recommendations For iRZ RUH2 version before 2b, update to version 2b or later to resolve the issue.

Fix

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2016-2309

Affected Products

Irz Ruh2

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-2309 · Security Note
• https://osv.dev/vulnerability/CVE-2016-2309 · Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-16-138-01 · Note