CoreCVE
Back

CRITICAL

The web interface on Advantech/B+B SmartWorx VESP211-EU devices with firmware 1.7.2 and VESP211-232 devices with firmware 1.5.1 and 1.7.2 relies on the client to implement access control, which allows remote attackers to perform administrative actions via modified JavaScript code

Published Feb 21, 2016

Description

The web interface on Advantech/B+B SmartWorx VESP211-EU devices with firmware 1.7.2 and VESP211-232 devices with firmware 1.5.1 and 1.7.2 relies on the client to implement access control, which allows remote attackers to perform administrative actions via modified JavaScript code.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-284

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner icscert
Published Feb 21, 2016
Updated Aug 5, 2024
Reserved Feb 9, 2016
Link CVE-2016-2275
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2016-2275
Red Hat
Severity n/a
Public date n/a
Links CVE-2016-2275