CVE-2016-4494: Kmc Controls Bac-5051e Firmware

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability on KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allows remote attackers to hijack the authentication of unspecified victims for requests that disclose the contents of a configuration file.

Affected products

• Kmc Controls Bac-5051e Firmware: up to and including -

Published 2016-06-10. Last modified 2026-06-17.