Ewon Ewon Firmware
6 CVEs affecting Ewon Ewon Firmware. Latest disclosed: 2015-12-23. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-7926 | Critical | 9.9 | 2015-12-23 | eWON devices with firmware before 10.1s0 omit RBAC for I/O server information and status requests, which allows remote attackers to obtain sensitive informatio… |
CVE-2015-7924 | High | 8.8 | 2015-12-23 | eWON devices with firmware before 10.1s0 do not trigger the discarding of browser session data in response to a log-off action, which makes it easier for remot… |
CVE-2015-7928 | High | 8.5 | 2015-12-23 | eWON devices with firmware before 10.1s0 do not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain a… |
CVE-2015-7925 | High | 8.0 | 2015-12-23 | Cross-site request forgery (CSRF) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to hijack the authentication of administra… |
CVE-2015-7927 | Medium | 6.1 | 2015-12-23 | Cross-site scripting (XSS) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to inject arbitrary web script or HTML via unspec… |
CVE-2015-7929 | Medium | 4.3 | 2015-12-23 | eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtain sensitive information by reading (1) w… |