CVE-2015-7910 Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to bypass intended access restrictions by disregarding this heade...
HighCVSS 7.8
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to bypass intended access restrictions by disregarding this header and processing the response body.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| exemys telemetry web server | All versions | No fix listed |
References
- ics-cert.us-cert.gov third-party-advisory us-government-resource