PT-2017-8781 · Visonic · Visonic Powerlink2

Aditya K. Sood · Published 2017-02-13 · Updated 2017-03-14 · CVE-2016-5813

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Visonic PowerLink2 versions prior to October 2016 firmware release

Description An issue was discovered where accessing a specific URL to an image results in the exposure of source code used in the web server.

Recommendations For versions prior to October 2016 firmware release, update to the October 2016 firmware release or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-5813

Affected Products

Visonic Powerlink2

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-5813 · Security Note
• http://securityfocus.com/bid/94894 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-16-348-01 · Note