VULNERABILITY INTELLIGENCE

CVE-2016-4506

CVSS score8 HIGH

EPSS probability0.52%

CISA KEVNot currently listed

Published2016-05-31

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

Cross-site request forgery (CSRF) vulnerability on Resource Data Management (RDM) Intuitive 650 TDB Controller devices before 2.1.24 allows remote authenticated users to hijack the authentication of arbitrary users.

Weakness classification

CWE-352: Cross-Site Request Forgery (CSRF)

Primary references

ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource