Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-8367

An issue was discovered in Schneider Electric Magelis HMI Magelis GTO Advanced Optimum Panels, all versions, Magelis GTU Universal Panel, all versions, Magelis STO5xx and STU Small panels, all versions, Magelis XBT GH Advanced Hand-held Panels, all versions, Magelis XBT GK Advanced Touchscreen Panels with Keyboard, all versions, Magelis XBT GT Advanced Touchscreen Panels, all versions, and Magelis XBT GTW Advanced Open Touchscreen Panels (Windows XPe). An attacker can open multiple connections to a targeted web server and keep connections open preventing new connections from being made, rendering the web server unavailable during an attack.

Published

2017-02-13T21:59:01.143

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-400
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System schneider-electric magelis_gtu_universal_panel_firmware - Yes
Hardware schneider-electric magelis_gtu_universal_panel - No
Operating System schneider-electric magelis_gto_advanced_optimum_panel_firmware - Yes
Hardware schneider-electric magelis_gto_advanced_optimum_panel - No
Operating System schneider-electric magelis_sto5_small_panel_firmware - Yes
Hardware schneider-electric magelis_sto5_small_panel - No
Operating System schneider-electric magelis_stu_small_panel_firmware - Yes
Hardware schneider-electric magelis_stu_small_panel - No
Operating System schneider-electric magelis_xbt_gh_advanced_hand-held_panel_firmware - Yes
Hardware schneider-electric magelis_xbt_gh_advanced_hand-held_panel - No
Operating System schneider-electric magelis_xbt_gk_advanced_touchscreen_panel_with_keyboard_firmware - Yes
Hardware schneider-electric magelis_xbt_gk_advanced_touchscreen_panel_with_keyboard - No
Operating System schneider-electric magelis_xbt_gt_advanced_touchscreen_panel_firmware - Yes
Hardware schneider-electric magelis_xbt_gt_advanced_touchscreen_panel - No
Operating System schneider-electric magelis_xbt_gtw_advanced_open_touchscreen_panel_firmware - Yes
Hardware schneider-electric magelis_xbt_gtw_advanced_open_touchscreen_panel - No
References