[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fAjXlvau1hpyTGBHMdT9vVR39RLDYfBYY-Eqs7vTa-O0":3,"g5a-risk:CVE-2016-9335":136},{"success":4,"data":5,"meta":134},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":15,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":55,"references":56,"referencesCount":63,"weaknesses":64,"weaknessesCount":79,"isActivelyExploited":80,"cisaInfo":15,"otxData":15,"relatedBlogPosts":81,"seoMetadata":82,"configurations":107,"relatedVendorCves":132,"notableEvents":133},"CVE-2016-9335","What is CVE-2016-9335?","A hard-coded cryptographic key vulnerability was identified in Red Lion Controls Sixnet-Managed Industrial Switches running firmware Version 5.0.196 and Stride-Managed Ethernet Switches running firmware Version 5.0.190. Vulnerable versions of Stride-Managed Ethernet switches and Sixnet-Managed Industrial switches use hard-coded HTTP SSL\u002FSSH keys for secure communication. Because these keys cannot be regenerated by users, all products use the same key. The attacker could disrupt communication or compromise the system.","A hard-coded cryptographic key vulnerability was identified in Red Lion Controls Sixnet-Managed Industrial Switches running firmware Version 5.0.196 and Stri...","2018-05-09T13:29:00.247","2019-10-09T23:20:24.46",10,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","CHANGED","HIGH","CRITICAL",3.9,6,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":12,"ImpactScore":12,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",0.01575,[36,36,36,36,36,36,36],"Critical",[40,45,49,52],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"redlion","sixnet-managed_industrial_switches_firmware","*","cpe:2.3:o:redlion:sixnet-managed_industrial_switches_firmware:*:*:*:*:*:*:*:*",{"vendor":41,"product":46,"version":47,"criteria":48,"vulnerable":4},"sixnet-managed_industrial_switches","-","cpe:2.3:h:redlion:sixnet-managed_industrial_switches:-:*:*:*:*:*:*:*",{"vendor":41,"product":50,"version":43,"criteria":51,"vulnerable":4},"stride-managed_ethernet_switches_firmware","cpe:2.3:o:redlion:stride-managed_ethernet_switches_firmware:*:*:*:*:*:*:*:*",{"vendor":41,"product":53,"version":47,"criteria":54,"vulnerable":4},"stride-managed_ethernet_switches","cpe:2.3:h:redlion:stride-managed_ethernet_switches:-:*:*:*:*:*:*:*",4,[57],{"url":58,"source":59,"tags":60},"https:\u002F\u002Fics-cert.us-cert.gov\u002Fadvisories\u002FICSA-17-054-02","Us-cert",[61,62],"Third Party Advisory","US Government Resource",1,[65,73],{"id":66,"name":67,"description":68,"extendedDescription":69,"status":70,"abstraction":71,"structure":72},"CWE-798","Use of Hard-coded Credentials","The product contains hard-coded credentials, such as a password or cryptographic key.","There are two main variations:","Draft","Base","Simple",{"id":74,"name":75,"description":76,"extendedDescription":77,"status":70,"abstraction":78,"structure":72},"CWE-321","Use of Hard-coded Cryptographic Key","The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered.","","Variant",2,false,[],{"title":83,"metaDescription":84,"keywords":85,"canonicalUrl":86,"structuredData":87},"What is CVE-2016-9335? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2016-9335, a critical severity cyber security vulnerability from 2018. A hard-coded cryptographic key vulnerability was identif...","CVE-2016-9335, CVE-2016-9335 vulnerability, CVE-2016-9335 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, redlion security, sixnet-managed_industrial_switches_firmware vulnerability, sixnet-managed_industrial_switches vulnerability, stride-managed_ethernet_switches_firmware vulnerability, stride-managed_ethernet_switches vulnerability","\u002Fwhat-is\u002Fcve-2016-9335",{"@context":88,"@type":89,"headline":83,"description":84,"datePublished":10,"dateModified":11,"author":90,"publisher":94,"about":98,"mainEntityOfPage":102,"articleSection":105,"keywords":106},"https:\u002F\u002Fschema.org","TechArticle",{"@type":91,"name":92,"url":93},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":91,"name":92,"url":93,"logo":95},{"@type":96,"url":97},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":99,"name":6,"description":100,"additionalType":101},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":103,"@id":104},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2016-9335","Cybersecurity","CVE-2016-9335, CVE-2016-9335 vulnerability, CVE-2016-9335 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[108,121],{"Operator":109,"Negate":15,"Nodes":110},"AND",[111,117],{"Operator":112,"Negate":15,"CPEMatch":113},"OR",[114],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":115,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":116},"03F5E9D5-C1A6-4BCC-BADC-26A4B8F69878","5.0.196",{"Operator":112,"Negate":15,"CPEMatch":118},[119],{"Vulnerable":15,"Criteria":48,"MatchCriteriaID":120,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"ACD086CC-785D-4926-B0DC-4CB158BA4B89",{"Operator":109,"Negate":15,"Nodes":122},[123,128],{"Operator":112,"Negate":15,"CPEMatch":124},[125],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":126,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":127},"1B6D8043-8582-40C3-A28B-6C98EA632820","5.0.190",{"Operator":112,"Negate":15,"CPEMatch":129},[130],{"Vulnerable":15,"Criteria":54,"MatchCriteriaID":131,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9D2E9860-EA9B-4A41-B555-B12D3F33D199",[],[],{"lastModified":11,"cacheTime":135,"version":33},1792363419077,{"score":137,"band":138,"action":139,"scoredAt":140},55,"Medium","Plan remediation","2026-10-16T06:43:59.81531+00:00"]