CVE-2016-5813

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

An issue was discovered in Visonic PowerLink2, all versions prior to October 2016 firmware release. When a specific URL to an image is accessed, the downloaded image carries with it source code used in the web server (INFORMATION EXPOSURE).

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	Visonic PowerLink2	Visonic PowerLink2

References

http://www.securityfocus.com/bid/94894Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-16-348-01Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/94894Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-16-348-01Third Party Advisory, US Government Resource

Timeline

Published: Feb 13, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-58148.6Buffer overflow in Rockwell Automation RSLogix Micro Starter Lite, RSLogix Micro Developer, RSLogix 500 Starter Edition, RSLogix 500 Standar CVE-2016-58159.8An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX series, ION8650 series, IO CVE-2016-58167.5A Use of Hard-Coded Cryptographic Key issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 version CVE-2016-58179.8SQL injection vulnerability in news pages in Cargotec Navis WebAccess before 2016-08-10 allows remote attackers to execute arbitrary SQL com CVE-2016-58189.8An issue was discovered in Schneider Electric PowerLogic PM8ECC device 2.651 and older. Undocumented hard-coded credentials allow access to CVE-2016-58196.1Moxa G3100V2 Series, editions prior to Version 2.8, and OnCell G3111/G3151/G3211/G3251 Series, editions prior to Version 1.7 allows a reflec CVE-2016-58217.8Huawei HiSuite before 4.0.4.204_ove (Out of China) and before 4.0.4.301 (China) use a weak ACL (FILE_WRITE_DATA for BUILTIN\Users) for the H CVE-2016-58227.5Huawei Oceanstor 5800 before V300R002C10SPC100 allows remote attackers to cause a denial of service (CPU consumption) via a large number of CVE-2016-58235.5The icalproperty_new_clone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (use-after-free) via a craf CVE-2016-58245.5libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.CVE-2016-58255.5The icalparser_parse_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) CVE-2016-58267.5The parser_get_next_char function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) by