Siemens Climatix POL909 (AWM and AWB) Information Disclosure Vulnerability

Siemens Climatix AWB (Advanced Web and BACnet Module, POL909) enables users of the Climatix 600 solution to connect to a BACnet IP network and implement and load customer web pages and features. Siemens Climatix AWM (Advanced Web Module, POL909) enables users of the Climatix 600 solution to implement and load customer web pages and features. Siemens Climatix POL909 (AWM and AWB) contains security vulnerabilities that could be exploited to allow logged-in users to access sensitive files.