LiveActive security incident?Get immediate response
CVE Record

CVE-2016-10512: MultiTech FaxFinder before 4.1.2 stores Passwords unencrypted for maintaining the test connectivity functio...

MultiTech FaxFinder before 4.1.2 stores Passwords unencrypted for maintaining the test connectivity function of its LDAP configuration. These credentials are retrieved by the system when the LDAP configuration page is opened and are embedded directly into the HTML source code in cleartext.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysismoderate

Security readout for executives and security teams

Plain-English summary

MultiTech FaxFinder before 4.1.2 can expose an LDAP password in clear text inside the web page source for its LDAP configuration page. If an unauthorized or over-privileged user can view that page, they may recover directory credentials and use them outside the appliance.

Executive priority

Treat this as a credential protection issue, not just an appliance bug. Prioritize remediation if FaxFinder uses privileged LDAP credentials or if management access is broadly reachable. Urgency is lower where admin access is tightly restricted and credentials are already rotated.

Technical view

The issue is plaintext storage and rendering of the password used by FaxFinder's LDAP test connectivity function. When the LDAP configuration page is opened, the stored credential is retrieved and embedded directly in the HTML source. The provided sources do not include CVSS, CWE, or detailed authentication prerequisites.

Likely exposure

Exposure is most likely in organizations running MultiTech FaxFinder versions before 4.1.2 with LDAP configured. Risk depends on who can access the management interface and LDAP configuration page. Internet exposure is not established by the provided sources.

Exploitation context

CISA KEV is false in the supplied bundle, and no cited source states active exploitation. The public Packet Storm reference describes credential disclosure, but the bundle does not provide evidence of exploitation at scale or exploit prerequisites beyond the LDAP configuration page behavior.

Researcher notes

The record lacks CVSS, CWE, affected CPEs, and authentication detail. Analysis should stay scoped to MultiTech FaxFinder before 4.1.2 and LDAP test connectivity credential disclosure. Do not assume unauthenticated access, public exploitation, or broader product impact from the supplied evidence.

Mitigation direction

  • Upgrade affected FaxFinder systems to version 4.1.2 or later where available.
  • Rotate LDAP credentials stored in affected FaxFinder LDAP configuration.
  • Restrict FaxFinder management access to trusted administrative networks and users.
  • Review vendor guidance for any additional remediation or configuration steps.

Validation and detection

  • Inventory FaxFinder appliances and confirm installed versions.
  • Identify systems running versions before 4.1.2 with LDAP configured.
  • In an authorized test, verify the LDAP page no longer renders stored passwords in HTML.
  • Review appliance access logs for unexpected LDAP configuration page views.
  • Confirm rotated LDAP accounts have least-privilege directory permissions.
Prepared
Confidence
medium
Sources
3

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2016-10512 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
0Timeline events
0ADP providers
2Source links

CVSS and timeline data

No CVSS vectors or timeline events were available in the normalized CVE source material.

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
n/an/an/aListed
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.