What is the CVSS score of CVE-2016-4500?

CVE-2016-4500 has a CVSS 3.0 base score of 5.8 (Medium). CVSS vector: CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H. EPSS exploitation probability: 0.2%.

Uc 7408 Lx Plus CVE-2016-4500

MEDIUM

7PK - Security Features (CWE-254)

2016-06-01 ics-cert@hq.dhs.gov

Information Disclosure Uc 7408 Lx Plus Uc 7408 Lx Plus Firmware

5.8

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

5.8 MEDIUM

AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVE Published

Jun 01, 2016 - 15:59 cve.org

MEDIUM 5.8

DescriptionCVE.org

Moxa UC-7408 LX-Plus devices allow remote authenticated users to write to the firmware, and consequently render a device unusable, by leveraging root access.

AnalysisAI

Moxa UC-7408 LX-Plus devices allow remote authenticated users to write to the firmware, and consequently render a device unusable, by leveraging root access. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-254. Moxa UC-7408 LX-Plus devices allow remote authenticated users to write to the firmware, and consequently render a device unusable, by leveraging root access. Affected products include: Moxa Uc-7408 Lx-Plus, Moxa Uc-7408 Lx-Plus Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.