CVE-2016-4511

Published: Jun 10, 2016Modified: May 6, 2026

2.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Exploitability: 1.3 / Impact: 1.4

Source: NVD

Description

ABB PCM600 before 2.7 uses an improper hash algorithm for the main application password, which makes it easier for local users to obtain sensitive cleartext information by leveraging read access to the ACTConfig configuration file.

Affected (1)

Products: Abb: Pcm600

Abb

1 product

Pcm600

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Abb Pcm600	Up to 2.6

Related CWEs

CWE-310

References (2)

https://ics-cert.us-cert.gov/advisories/ICSA-16-152-02

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://ics-cert.us-cert.gov/advisories/ICSA-16-152-02

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.