CVE Daily

CVE-2015-7926

eWON devices with firmware before 10.1s0 omit RBAC for I/O server information an...

Critical CVSS 9.9

Overview

eWON devices with firmware before 10.1s0 omit RBAC for I/O server information and status requests, which allows remote attackers to obtain sensitive information via an unspecified URL.

CWE: CWE-200 Published: 2015-12-23T11:59:02.050
Risk analysis

This vulnerability is rated 🔴 CRITICAL.

  • CVSS: 9.9 (CRITICAL)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags