Details of VAR-201702-0158

ID

VAR-201702-0158

CVE

CVE-2016-10224

TITLE

Sauter NovaWeb Web HMI Vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2016-007957

DESCRIPTION

An issue was discovered in Sauter NovaWeb web HMI. The application uses a protection mechanism that relies on the existence or values of a cookie, but it does not properly ensure that the cookie is valid for the associated user. Sauter is a leading provider of construction, room automation, energy management and equipment management. The Sauter NovaWeb Web HMI has a certification bypass vulnerability that an attacker can use to bypass security restrictions and perform unauthorized operations. Attackers can exploit this issue to gain unauthorized access and perform unauthorized actions

Trust: 2.43

sources: NVD: CVE-2016-10224 // JVNDB: JVNDB-2016-007957 // CNVD: CNVD-2016-12553 // BID: 94782

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2016-12553

AFFECTED PRODUCTS

vendor:	sauter	model:	novaweb web hmi	scope:	-	version:	-	Trust: 1.2
vendor:	sauter controls	model:	novaweb web hmi	scope:	eq	version:	*	Trust: 1.0
vendor:	fr sauter	model:	novaweb web hmi	scope:	eq	version:	-	Trust: 0.8
vendor:	sauter	model:	novaweb web hmi	scope:	eq	version:	0	Trust: 0.3

sources: CNVD: CNVD-2016-12553 // BID: 94782 // JVNDB: JVNDB-2016-007957 // CNNVD: CNNVD-201702-464 // NVD: CVE-2016-10224

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2016-10224
value:	HIGH
Trust: 1.0
NVD:	CVE-2016-10224
value:	HIGH
Trust: 0.8
CNVD:	CNVD-2016-12553
value:	HIGH
Trust: 0.6
CNNVD:	CNNVD-201702-464
value:	HIGH
Trust: 0.6

nvd@nist.gov:	CVE-2016-10224
severity:	MEDIUM
baseScore:	6.5
vectorString:	AV:N/AC:L/AU:S/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2016-12553
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

nvd@nist.gov:	CVE-2016-10224
baseSeverity:	HIGH
baseScore:	7.2
vectorString:	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.2
impactScore:	5.9
version:	3.1
Trust: 1.0
NVD:	CVE-2016-10224
baseSeverity:	HIGH
baseScore:	7.2
vectorString:	CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: CNVD: CNVD-2016-12553 // JVNDB: JVNDB-2016-007957 // CNNVD: CNNVD-201702-464 // NVD: CVE-2016-10224

PROBLEMTYPE DATA

problemtype:

CWE-254

Trust: 1.8

sources: JVNDB: JVNDB-2016-007957 // NVD: CVE-2016-10224

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201702-464

TYPE

security feature problem

Trust: 0.6

sources: CNNVD: CNNVD-201702-464

CONFIGURATIONS

sources: JVNDB: JVNDB-2016-007957

PATCH

title:

Top Page

url:

http://www.sauter-controls.com/en.html

Trust: 0.8

sources: JVNDB: JVNDB-2016-007957

EXTERNAL IDS

db:	ICS CERT	id:	ICSA-16-343-02	Trust: 3.3
db:	NVD	id:	CVE-2016-10224	Trust: 2.7
db:	BID	id:	94782	Trust: 1.5
db:	JVNDB	id:	JVNDB-2016-007957	Trust: 0.8
db:	CNVD	id:	CNVD-2016-12553	Trust: 0.6
db:	CNNVD	id:	CNNVD-201702-464	Trust: 0.6

sources: CNVD: CNVD-2016-12553 // BID: 94782 // JVNDB: JVNDB-2016-007957 // CNNVD: CNNVD-201702-464 // NVD: CVE-2016-10224

REFERENCES

url:	https://ics-cert.us-cert.gov/advisories/icsa-16-343-02	Trust: 3.3
url:	http://www.securityfocus.com/bid/94782	Trust: 1.2
url:	http://www.sauter-controls.com/en.html	Trust: 0.9
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-10224	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2016-10224	Trust: 0.8

sources: CNVD: CNVD-2016-12553 // BID: 94782 // JVNDB: JVNDB-2016-007957 // CNNVD: CNNVD-201702-464 // NVD: CVE-2016-10224

CREDITS

Maxim Rupp

Trust: 0.9

sources: BID: 94782 // CNNVD: CNNVD-201702-464

SOURCES

db:	CNVD	id:	CNVD-2016-12553
db:	BID	id:	94782
db:	JVNDB	id:	JVNDB-2016-007957
db:	CNNVD	id:	CNNVD-201702-464
db:	NVD	id:	CVE-2016-10224

LAST UPDATE DATE

2025-04-20T23:23:53.182000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2016-12553	date:	2016-12-19T00:00:00
db:	BID	id:	94782	date:	2019-04-12T21:00:00
db:	JVNDB	id:	JVNDB-2016-007957	date:	2017-03-31T00:00:00
db:	CNNVD	id:	CNNVD-201702-464	date:	2021-09-01T00:00:00
db:	NVD	id:	CVE-2016-10224	date:	2025-04-20T01:37:25.860

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2016-12553	date:	2016-12-19T00:00:00
db:	BID	id:	94782	date:	2016-12-08T00:00:00
db:	JVNDB	id:	JVNDB-2016-007957	date:	2017-03-31T00:00:00
db:	CNNVD	id:	CNNVD-201702-464	date:	2017-02-15T00:00:00
db:	NVD	id:	CVE-2016-10224	date:	2017-02-13T21:59:00.127