Read the docs
TI-2016-03881 Aliases CVE-2016-4510GHSA-wgrp-46g8-hr3f

The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02…

Priority MEDIUM 58CWE-287Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · None
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-287.

Summary

The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to bypass authentication and read arbitrary files via unspecified vectors.

Why it matters now

EPSS 0.20104 97th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 54

CPEVersionsRoleVendor
cpe:2.3:a:trihedral:vtscada:10.1.05:*:*:*:*:*:*:*10.1.05VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:10.1.06:*:*:*:*:*:*:*10.1.06VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:10.1.07:*:*:*:*:*:*:*10.1.07VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:10.1.12:*:*:*:*:*:*:*10.1.12VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:10.0.11:*:*:*:*:*:*:*10.0.11VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:10.0.13:*:*:*:*:*:*:*10.0.13VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:10.0.14:*:*:*:*:*:*:*10.0.14VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:10.0.16:*:*:*:*:*:*:*10.0.16VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:10.0.17:*:*:*:*:*:*:*10.0.17VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:11.1.05:*:*:*:*:*:*:*11.1.05VulnerableTrihedral
  • cpe:2.3:a:trihedral:vtscada:10.1.05:*:*:*:*:*:*:* Versions 10.1.05 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:10.1.06:*:*:*:*:*:*:* Versions 10.1.06 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:10.1.07:*:*:*:*:*:*:* Versions 10.1.07 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:10.1.12:*:*:*:*:*:*:* Versions 10.1.12 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:10.0.11:*:*:*:*:*:*:* Versions 10.0.11 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:10.0.13:*:*:*:*:*:*:* Versions 10.0.13 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:10.0.14:*:*:*:*:*:*:* Versions 10.0.14 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:10.0.16:*:*:*:*:*:*:* Versions 10.0.16 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:10.0.17:*:*:*:*:*:*:* Versions 10.0.17 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:11.1.05:*:*:*:*:*:*:* Versions 11.1.05 Vulnerable ·Trihedral
Show 44 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:trihedral:vtscada:11.1.06:*:*:*:*:*:*:*11.1.06VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:11.1.09:*:*:*:*:*:*:*11.1.09VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:11.1.10:*:*:*:*:*:*:*11.1.10VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:11.1.13:*:*:*:*:*:*:*11.1.13VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:11.1.14:*:*:*:*:*:*:*11.1.14VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:11.1.15:*:*:*:*:*:*:*11.1.15VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:11.1.16:*:*:*:*:*:*:*11.1.16VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:11.1.17:*:*:*:*:*:*:*11.1.17VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:11.1.18:*:*:*:*:*:*:*11.1.18VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:11.1.19:*:*:*:*:*:*:*11.1.19VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:11.1.20:*:*:*:*:*:*:*11.1.20VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:11.1.21:*:*:*:*:*:*:*11.1.21VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:11.1.22:*:*:*:*:*:*:*11.1.22VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:11.1.24:*:*:*:*:*:*:*11.1.24VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:8.0.05:*:*:*:*:*:*:*8.0.05VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:8.0.12:*:*:*:*:*:*:*8.0.12VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:8.0.16:*:*:*:*:*:*:*8.0.16VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:8.0.18:*:*:*:*:*:*:*8.0.18VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:8.1.05:*:*:*:*:*:*:*8.1.05VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:8.1.06:*:*:*:*:*:*:*8.1.06VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:10.2.05:*:*:*:*:*:*:*10.2.05VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:10.2.07:*:*:*:*:*:*:*10.2.07VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:10.2.08:*:*:*:*:*:*:*10.2.08VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:10.2.11:*:*:*:*:*:*:*10.2.11VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:10.2.13:*:*:*:*:*:*:*10.2.13VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:10.2.14:*:*:*:*:*:*:*10.2.14VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:10.2.15:*:*:*:*:*:*:*10.2.15VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:10.2.17:*:*:*:*:*:*:*10.2.17VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:10.2.19:*:*:*:*:*:*:*10.2.19VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:10.2.20:*:*:*:*:*:*:*10.2.20VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:10.2.21:*:*:*:*:*:*:*10.2.21VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:10.2.22:*:*:*:*:*:*:*10.2.22VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:9.0.02:*:*:*:*:*:*:*9.0.02VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:9.0.03:*:*:*:*:*:*:*9.0.03VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:9.0.08:*:*:*:*:*:*:*9.0.08VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:9.1.02:*:*:*:*:*:*:*9.1.02VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:9.1.03:*:*:*:*:*:*:*9.1.03VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:9.1.05:*:*:*:*:*:*:*9.1.05VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:9.1.09:*:*:*:*:*:*:*9.1.09VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:9.1.11:*:*:*:*:*:*:*9.1.11VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:9.1.14:*:*:*:*:*:*:*9.1.14VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:9.1.20:*:*:*:*:*:*:*9.1.20VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:11.0.05:*:*:*:*:*:*:*11.0.05VulnerableTrihedral
cpe:2.3:a:trihedral:vtscada:11.0.07:*:*:*:*:*:*:*11.0.07VulnerableTrihedral
  • cpe:2.3:a:trihedral:vtscada:11.1.06:*:*:*:*:*:*:* Versions 11.1.06 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:11.1.09:*:*:*:*:*:*:* Versions 11.1.09 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:11.1.10:*:*:*:*:*:*:* Versions 11.1.10 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:11.1.13:*:*:*:*:*:*:* Versions 11.1.13 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:11.1.14:*:*:*:*:*:*:* Versions 11.1.14 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:11.1.15:*:*:*:*:*:*:* Versions 11.1.15 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:11.1.16:*:*:*:*:*:*:* Versions 11.1.16 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:11.1.17:*:*:*:*:*:*:* Versions 11.1.17 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:11.1.18:*:*:*:*:*:*:* Versions 11.1.18 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:11.1.19:*:*:*:*:*:*:* Versions 11.1.19 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:11.1.20:*:*:*:*:*:*:* Versions 11.1.20 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:11.1.21:*:*:*:*:*:*:* Versions 11.1.21 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:11.1.22:*:*:*:*:*:*:* Versions 11.1.22 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:11.1.24:*:*:*:*:*:*:* Versions 11.1.24 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:8.0.05:*:*:*:*:*:*:* Versions 8.0.05 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:8.0.12:*:*:*:*:*:*:* Versions 8.0.12 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:8.0.16:*:*:*:*:*:*:* Versions 8.0.16 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:8.0.18:*:*:*:*:*:*:* Versions 8.0.18 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:8.1.05:*:*:*:*:*:*:* Versions 8.1.05 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:8.1.06:*:*:*:*:*:*:* Versions 8.1.06 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:10.2.05:*:*:*:*:*:*:* Versions 10.2.05 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:10.2.07:*:*:*:*:*:*:* Versions 10.2.07 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:10.2.08:*:*:*:*:*:*:* Versions 10.2.08 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:10.2.11:*:*:*:*:*:*:* Versions 10.2.11 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:10.2.13:*:*:*:*:*:*:* Versions 10.2.13 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:10.2.14:*:*:*:*:*:*:* Versions 10.2.14 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:10.2.15:*:*:*:*:*:*:* Versions 10.2.15 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:10.2.17:*:*:*:*:*:*:* Versions 10.2.17 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:10.2.19:*:*:*:*:*:*:* Versions 10.2.19 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:10.2.20:*:*:*:*:*:*:* Versions 10.2.20 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:10.2.21:*:*:*:*:*:*:* Versions 10.2.21 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:10.2.22:*:*:*:*:*:*:* Versions 10.2.22 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:9.0.02:*:*:*:*:*:*:* Versions 9.0.02 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:9.0.03:*:*:*:*:*:*:* Versions 9.0.03 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:9.0.08:*:*:*:*:*:*:* Versions 9.0.08 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:9.1.02:*:*:*:*:*:*:* Versions 9.1.02 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:9.1.03:*:*:*:*:*:*:* Versions 9.1.03 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:9.1.05:*:*:*:*:*:*:* Versions 9.1.05 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:9.1.09:*:*:*:*:*:*:* Versions 9.1.09 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:9.1.11:*:*:*:*:*:*:* Versions 9.1.11 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:9.1.14:*:*:*:*:*:*:* Versions 9.1.14 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:9.1.20:*:*:*:*:*:*:* Versions 9.1.20 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:11.0.05:*:*:*:*:*:*:* Versions 11.0.05 Vulnerable ·Trihedral
  • cpe:2.3:a:trihedral:vtscada:11.0.07:*:*:*:*:*:*:* Versions 11.0.07 Vulnerable ·Trihedral

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2016-4510
  2. 2026-10-03 Alias added: GHSA-wgrp-46g8-hr3f

References

Advisory 1

Other 1

  • TI-2016-03892 The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02… KEVCVSS 3.1HIGH 7.5
  • TI-2016-03901 Directory traversal vulnerability in the WAP interface in Trihedral VTScada (formerly… CVSS 3.0CRITICAL 9.1
  • TI-2022-02936 Improper input validation in Trihedral VTScada CVSS 3.1HIGH 7.5
  • TI-2014-07460 Trihedral Engineering Limited VTScada Integer Overflow CVSS 2.0HIGH 7.8
  • TI-2017-10211 Uncontrolled search path in Trihedral Engineering Limited VTScada CVSS 3.0HIGH 7.8
  • TI-2017-03955 Information disclosure in Trihedral VTScada CVSS 3.0HIGH 7.5
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences