Information disclosure in Exemys Telemetry Web Server

CVE-2015-7910

Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to bypass intended access restrictions by disregarding this header and processing the response body.

Vulnerability class: Information Disclosure

EPSS: 0.021 (79.4th percentile) — read the EPSS interpretation.

Affected products

Exemys Telemetry_web_server
N/a — versions n/a

Weakness classification (CWE)

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)