Design/Logic Flaw

2016-04-0623:59:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.1%

JSON

Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to read the configuration file, and consequently discover credentials, via a direct request.

CPENameOperatorVersion
eg2_web_controleq<= 4.4p

CPE	Name	Operator	Version
	eg2_web_control	eq	<= 4.4p

References

ics-cert.us-cert.gov/advisories/ICSA-16-061-03