Lucene search
HistoryOct 25, 2015 - 2:59 a.m.
CVE-2015-1002
cve-2015-1002
ininet
ewebserver
vulnerability
remote attack
file manipulation
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.1%
IniNet embeddedWebServer (aka eWebServer) before 2.02 mishandles URL encoding, which allows remote attackers to write to or delete files via a crafted string.
Affected configurations
Node
ininet_solutionsscada_web_serverMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| ininet_solutions:scada_web_server | ininet solutions scada web server | eq | - |
Related
nvd
nvd
CVE-2015-1002
2015-10-25 02:59:01
cvelist
cvelist
CVE-2015-1002
2015-10-25 01:00:00
prion
prion
Spoofing
2015-10-25 02:59:00
nessus
nessus
IniNet Solutions SCADA Web Server < 2.02.0000
2015-11-24 00:00:00
ics
ics
IniNet Solutions SCADA Web Server Vulnerabilities
2018-08-27 12:00:00
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.1%
Related for CVE-2015-1002