CVE-2016-5813 Information disclosure in Visonic PowerLink2
Attackers can access source code by requesting specific image URLs, exposing internal logic of the Visonic PowerLink2 web server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-5813?
CVE-2016-5813 is a medium-severity vulnerability in Visonic PowerLink2, published on 13 Feb 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in Visonic PowerLink2, all versions prior to October 2016 firmware release. When a specific URL to an image is accessed, the downloaded image carries with it source code used in the web server (INFORMATION EXPOSURE).
Weakness: CWE-200
Which versions are affected by CVE-2016-5813?
It affects 1 product.
Products include Visonic Powerlink2 Firmware.
How do I fix CVE-2016-5813?
No fix has been published for CVE-2016-5813 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-5813 being exploited?
There is no known exploitation of CVE-2016-5813 in the wild and no public exploit code.
Other vulnerabilities in Visonic PowerLink2
Sources
Also known as GHSA-5mf6-vrmq-h9c8.