CVE-2016-4523VulnerabilityPublished 04/15/2022Updated 10/24/2026

CVE-2016-4523: Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability

Affects Trihedral VTScada (formerly VTS)Source CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 04/15/2022
KEV deadline: 05/06/2022
EPSS: 31.2% chance of exploitation in 30 days – higher than 98% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2016-4523 (opens in a new tab)

Description

CVE-2016-4523 is a denial-of-service vulnerability in the WAP interface of Trihedral VTScada (formerly VTS) that allows remote attackers to disrupt service. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.

Summary

The WAP interface in Trihedral VTScada (formerly VTS) contains a vulnerability (CVE-2016-4523) that permits remote attackers to cause a denial-of-service (DoS) condition. The vulnerability is classified under CWE-119, indicating a potential memory safety issue. Exploitation of this flaw can disrupt the availability of the affected system. There is no vendor advisory or patch information available in the provided data.

Impact

Successful exploitation results in denial-of-service, impacting the availability of the VTScada system. This can disrupt operations relying on the affected software. The vulnerability has been observed exploited in the wild, confirming active threat activity.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider restricting access to the WAP interface to trusted networks and monitor for unusual activity targeting this interface.

Weaknesses

CWE-119Buffer Errors (Memory Bounds) (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 11:26:53 UTC

Weaknesses

References

Related threats