Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Jun 9, 2016 · Catalog

   Detected

   The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via unspecified vectors.

2. Apr 15, 2022 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. May 6, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via unspecified vectors.

Affected

• cpe trihedral/vtscadaversion unspecified
• vendor Trihedral VTScada (formerly VTS)version unspecified

Sources

• CISA KEVConfirmed exploitationCVE-2016-4523

  The WAP interface in Trihedral VTScada (formerly VTS) allows remote attackers to cause a denial-of-service (DoS).

  cisa.gov
• CVE.orgVulnerability recordCVE-2016-4523

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2016-4523

  30-day exploitation probability 31.2%

  first.org
• NIST NVDVulnerability recordCVE-2016-4523

  The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via unspecified vectors.

  nvd.nist.gov

References

• Broken Link · securityfocus.com
• Third Party Advisory · zerodayinitiative.com
• Third Party Advisory · ics-cert.us-cert.gov
• CISA note · nvd.nist.gov
• US Government Resource · cisa.gov