CVE-2016-2294

Published: Apr 21, 2016Modified: May 6, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The AXM-NET module in Accuenergy Acuvim II NET Firmware 3.08 and Acuvim IIR NET Firmware 3.08 allows remote attackers to discover a cleartext mail-server password via unspecified vectors.

Affected (2)

Products: Accuenergy: Acuvim Ii Net Firmware, Acuvim Iir Net Firmware

Accuenergy

2 products

Acuvim Ii Net Firmware

Acuvim Iir Net Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Accuenergy Acuvim Ii Net Firmware	Up to 3.08

Running on/with	Platform Versions
Accuenergy Acuvim Ii	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Accuenergy Acuvim Iir Net Firmware	Up to 3.08

Running on/with	Platform Versions
Accuenergy Acuvim Iir	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://ics-cert.us-cert.gov/advisories/ICSA-16-105-02

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://ics-cert.us-cert.gov/advisories/ICSA-16-105-02

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.