CVE-2015-7928 eWON devices with firmware before 10.1s0 do not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain access by leveraging an unattended worksta...
HighCVSS 8.5
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
eWON devices with firmware before 10.1s0 do not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ewon firmware | <= 10.0s0 | No fix listed |
References
- ewon.biz vendor-advisory
- packetstormsecurity.com
- 20151224 eWON sa Industrial router - Multiple Vulnerabilities mailing-list
- 79625 vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource
- seclists.org