« Volver al listado

CVE-2016-5782

Estado: ModificadaAlta (8.6)—

Ha sido descubierto un problema en Locus Energy LGate en versiones anteriores a 1.05H, LGate 50, LGate 100, LGate 101, LGate 120 y LGate 320. Medidores Locus Energy utilizan secuencias de comandos PHP para gestionar los parámetros del medidor de energía para el control de voltaje y configuración de red. El código PHP no valida adecuadamente la información que es enviada en la solicitud POST.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Locusenergy — Lgate Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2016-5782",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 8.6,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 4.7,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Locus Energy LGate through 320",
          "versions": [
            {
              "status": "affected",
              "version": "Locus Energy LGate through 320"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-02-13T21:59:00.190",
  "references": [
    {
      "url": "http://www.securityfocus.com/bid/94698",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "http://www.securityfocus.com/bid/94782",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-231-01-0",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "http://www.securityfocus.com/bid/94698",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/94782",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-231-01-0",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue was discovered in Locus Energy LGate prior to 1.05H, LGate 50, LGate 100, LGate 101, LGate 120, and LGate 320. Locus Energy meters use a PHP script to manage the energy meter parameters for voltage monitoring and network configuration. The PHP code does not properly validate information that is sent in the POST request."
    },
    {
      "lang": "es",
      "value": "Ha sido descubierto un problema en Locus Energy LGate en versiones anteriores a 1.05H, LGate 50, LGate 100, LGate 101, LGate 120 y LGate 320. Medidores Locus Energy utilizan secuencias de comandos PHP para gestionar los parámetros del medidor de energía para el control de voltaje y configuración de red. El código PHP no valida adecuadamente la información que es enviada en la solicitud POST."
    }
  ],
  "lastModified": "2026-06-17T00:50:02.050",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:locusenergy:lgate_firmware:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CA8AE7BB-4AAC-45E2-A194-8D72C4A5DD6D"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:locusenergy:lgate_100:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7EB68DEF-2A97-42C8-BA73-43C97BAD2F8A"
            },
            {
              "criteria": "cpe:2.3:h:locusenergy:lgate_101:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9DB10815-4C28-4DC1-9525-6B9D5BCC4E60"
            },
            {
              "criteria": "cpe:2.3:h:locusenergy:lgate_120:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3059C40F-AF97-4D7E-9470-C6791CF0154C"
            },
            {
              "criteria": "cpe:2.3:h:locusenergy:lgate_320:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D2F42CBC-A4F1-4078-8E18-D6EF2238194D"
            },
            {
              "criteria": "cpe:2.3:h:locusenergy:lgate_50:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "051167FD-3CF8-4D76-955C-C77066D156A4"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "ics-cert@hq.dhs.gov"
}