CVE-2015-7931 The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station does not authenticate the station device, which allows man-in-the-middle attackers to spoof devices and obtain sensitive informat...
HighCVSS 8.7
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station does not authenticate the station device, which allows man-in-the-middle attackers to spoof devices and obtain sensitive information by reading cleartext packet data, related to the lack of SSL support.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| adcon a840 telemetry gateway base station firmware | All versions | No fix listed |
References
- 79345 vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource