CVE-2015-7927 Cross-site scripting (XSS) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
MediumCVSS 6.1
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ewon firmware | <= 10.0s0 | No fix listed |
References
- ewon.biz vendor-advisory
- packetstormsecurity.com
- 20151224 eWON sa Industrial router - Multiple Vulnerabilities mailing-list
- 79625 vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource