CVE-2015-7929 eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Ref...
MediumCVSS 4.3
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ewon firmware | <= 10.0s0 | No fix listed |
References
- ewon.biz vendor-advisory
- packetstormsecurity.com
- 20151224 eWON sa Industrial router - Multiple Vulnerabilities mailing-list
- 79625 vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource