PT-2017-9649 · Lynxspring · Lynxspring Jenesys Bas Bridge

Published 2017-02-13 · Updated 2017-02-17 · CVE-2016-8378

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Lynxspring JENEsys BAS Bridge versions 1.1.8 and older

Description The application's database lacks sufficient safeguards for protecting credentials.

Recommendations For versions 1.1.8 and older, consider implementing additional security measures to protect credentials, such as encryption or secure storage, until a patched version is available.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2016-8378

Affected Products

Lynxspring Jenesys Bas Bridge

References · 4

• https://osv.dev/vulnerability/CVE-2016-8378 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-8378 · Security Note
• http://securityfocus.com/bid/94344 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-16-320-01 · Note