CVE-2016-2307

Published: Oct 5, 2016Modified: May 6, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

American Auto-Matrix Aspect-Nexus Building Automation Front-End Solutions application before 3.0.0 and Aspect-Matrix Building Automation Front-End Solutions application allow remote attackers to read arbitrary files via unspecified vectors, as demonstrated by the configuration file.

Affected (2)

Products: American Auto Matrix: Aspect Matrix Building Automation Front End Solutions Application, Aspect Nexus Building Automation Front End Solutions Application

American Auto Matrix

2 products

Aspect Matrix Building Automation Front End Solutions Application

Aspect Nexus Building Automation Front End Solutions Application

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
American Auto Matrix Aspect Matrix Building Automation Front End Solutions Application	All versions
American Auto Matrix Aspect Nexus Building Automation Front End Solutions Application	Up to 2.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://ics-cert.us-cert.gov/advisories/ICSA-16-273-01-0

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://ics-cert.us-cert.gov/advisories/ICSA-16-273-01-0

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.