eWON Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-7929US | medium4.3 | — | ||
eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtain sensitive information by reading (1) web-server access logs… | ||||
| CVE-2015-7928US | high8.5 | — | ||
eWON devices with firmware before 10.1s0 do not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain access by leveraging a… | ||||
| CVE-2015-7927US | medium6.1 | — | ||
Cross-site scripting (XSS) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | ||||
| CVE-2015-7926US | critical9.9 | — | ||
eWON devices with firmware before 10.1s0 omit RBAC for I/O server information and status requests, which allows remote attackers to obtain sensitive information via an unspecified… | ||||
| CVE-2015-7925US | high8.0 | — | ||
Cross-site request forgery (CSRF) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to hijack the authentication of administrators for requests tha… | ||||
| CVE-2015-7924US | high8.8 | — | ||
eWON devices with firmware before 10.1s0 do not trigger the discarding of browser session data in response to a log-off action, which makes it easier for remote attackers to obtain… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-15-351-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-15-351-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (6)
- MitigationeWON sa industrial router firmware
In the case of vulnerabilities not mitigated by firmware updates, eWON sa recommends using the router in a secure environment.
- MitigationeWON sa industrial router firmware
In the case of vulnerabilities not mitigated by firmware updates, eWON sa recommends using the router in a secure environment.
- MitigationeWON sa industrial router firmware
In the case of vulnerabilities not mitigated by firmware updates, eWON sa recommends using the router in a secure environment.
- MitigationeWON sa industrial router firmware
In the case of vulnerabilities not mitigated by firmware updates, eWON sa recommends using the router in a secure environment.
- MitigationeWON sa industrial router firmware
In the case of vulnerabilities not mitigated by firmware updates, eWON sa recommends using the router in a secure environment.
- MitigationeWON sa industrial router firmware
In the case of vulnerabilities not mitigated by firmware updates, eWON sa recommends using the router in a secure environment.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan