CVE-2015-7914 Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote attackers to bypass authentication by leveraging knowledge of a password hash without knowledge of the associated password.
HighCVSS 8.1
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote attackers to bypass authentication by leveraging knowledge of a password hash without knowledge of the associated password.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sauter moduweb vision | <= 1.5.5 | No fix listed |
References
- 20160203 Sauter ModuWEB Vision SCADA vulnerabilities mailing-list
- ics-cert.us-cert.gov third-party-advisory us-government-resource