CVE-2018-16606

MEDIUM ⚠ Exploit

In ProConf before 6.1, an Insecure Direct Object Reference (IDOR) allows any author to view and grab all submitted papers (Title and Abstract) and their authors' personal information (Name, Email, ...

Affects 1 product across 1 vendor.

CVSS 3.06.5
EPSS5.9%
Percentile93th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, low privileges required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, no integrity impact, no availability impact.
CWE Weakness Definitions
CWE-639: Authorization Bypass Through User-Controlled Key (IDOR)

Software uses a user-supplied key to access resources without verifying authorization for that specific resource.

◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2018. A medium severity vulnerability affects Proconf systems (CVE-2018-16606). Public exploit code is available. Isolate affected systems if patching is not feasible.

BSID: BS-2018-GLOBAL-160831-M • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2018-16606?
This vulnerability was disclosed in 2018. A medium severity vulnerability affects Proconf systems (CVE-2018-16606). Public exploit code is available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2018-16606?
CVE-2018-16606 has CVSS 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS: 5.9%.
Is CVE-2018-16606 actively exploited?
Public exploit available for CVE-2018-16606. Exploitation risk elevated.
How do I remediate CVE-2018-16606?
Priority: MONITOR.
What systems are affected by CVE-2018-16606?
CVE-2018-16606 affects Proconf Proconf.
Vulnerability Details
CVE IDCVE-2018-16606
BSIDBS-2018-GLOBAL-160831-M BreachSpider Global ID
CVSS VectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Published2018-09-06
Last Modified2024-11-21
ICS Relevance0%
Weakness (CWE)
Authorization Bypass Through User-Controlled Key (IDOR)
SourceNVD
Official Description

In ProConf before 6.1, an Insecure Direct Object Reference (IDOR) allows any author to view and grab all submitted papers (Title and Abstract) and their authors' personal information (Name, Email, Organization, and Position) by changing the value of Paper ID (the pid parameter).

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: In ProConf before 6.1, an Insecure Direct Object Reference (IDOR) allows any author to view and grab all submitted papers (Title and Abstract) and their authors' personal information (Name, Email, Organization, and Position) by changing the value of Paper ID (the pid parameter). CVSS vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductAffected Versions
Proconf Proconf < 6.1
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 2961 Days
CISA known-exploitedNot in KEV catalog
Public Exploit⚠ Available — Reference
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash4ae9f9518de10fc1e6e61392e993e6979c0b3fe81dde7e2ad18bb76b573070a1155e2910591629f06665e5389d7b3a9bcc035f25526e8d8e33017ce64506aa67

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →