What is the severity of CVE-2016-2291?

CVE-2016-2291 has been rated as a critical vulnerability due to its potential for remote code execution.

How do I fix CVE-2016-2291?

To mitigate CVE-2016-2291, upgrade to versions 4.05.000 or later of the affected Pro-face GP-Pro EX software.

What vulnerabilities are associated with CVE-2016-2291?

CVE-2016-2291 is associated with remote code execution and denial of service due to out-of-bounds read.

Who is affected by CVE-2016-2291?

CVE-2016-2291 affects users of Schneider Electric Pro-face GP-Pro EX software versions prior to 4.05.000.

Can CVE-2016-2291 be exploited remotely?

Yes, CVE-2016-2291 can be exploited remotely by attackers without requiring physical access to the system.

Vulnerability/
CVE-2016-2291

medium

6.5

CWE

125

6/4/2016

5/8/2024

CVE-2016-2291

First published: Wed Apr 06 2016(Updated: )

Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allow remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.

Credit: ics-cert@hq.dhs.gov

Affected Software	Affected Version	How to fix
Schneider Electric GP-Pro EX	<=4.0.4
Schneider Electric Proface GP-Pro EX	<=4.0.4
Schneider Electric Proface GP-Pro EX	<=4.0.4
Schneider Electric Proface GP-Pro EX	<=4.0.4

Never miss a vulnerability like this again

Reference Links

https://ics-cert.us-cert.gov/advisories/ICSA-16-096-01

Frequently Asked Questions

What is the severity of CVE-2016-2291?
CVE-2016-2291 has been rated as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2016-2291?
To mitigate CVE-2016-2291, upgrade to versions 4.05.000 or later of the affected Pro-face GP-Pro EX software.
What vulnerabilities are associated with CVE-2016-2291?
CVE-2016-2291 is associated with remote code execution and denial of service due to out-of-bounds read.
Who is affected by CVE-2016-2291?
CVE-2016-2291 affects users of Schneider Electric Pro-face GP-Pro EX software versions prior to 4.05.000.
Can CVE-2016-2291 be exploited remotely?
Yes, CVE-2016-2291 can be exploited remotely by attackers without requiring physical access to the system.

agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/weakness
agent/last-modified-date
agent/severity
agent/references
agent/author
agent/first-publish-date
agent/description
agent/event
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/schneider-electric
canonical/schneider electric gp-pro ex
version/schneider electric gp-pro ex/4.0.4
canonical/schneider electric proface gp-pro ex
version/schneider electric proface gp-pro ex/4.0.4

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.