Lucene search

K
cveIcscertCVE-2015-0991
HistoryApr 03, 2015 - 10:59 a.m.

CVE-2015-0991

2015-04-0310:59:13
CWE-200
icscert
web.nvd.nist.gov
31
cve-2015-0991
inductive automation ignition
remote attack
information disclosure
exception handling
pathname information
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

0.006

Percentile

78.4%

Inductive Automation Ignition 7.7.2 allows remote attackers to obtain sensitive information by reading an error message about an unhandled exception, as demonstrated by pathname information.

Affected configurations

Nvd
Node
inductiveautomationignitionMatch7.7.2
VendorProductVersionCPE
inductiveautomationignition7.7.2cpe:2.3:a:inductiveautomation:ignition:7.7.2:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

0.006

Percentile

78.4%