Socomec DIRIS A-40 Password Disclosure Vulnerability

Socomec DIRIS A-40 is a network management solution developed by SOCOMEC for its Uninterruptible Power Supply UPS products to enable remote monitoring, condition management and automated operation of UPS. A password disclosure vulnerability exists in Socomec DIRIS A-40, which arises from errors...

CVE-2019-15859

Password disclosure in the web interface on socomec DIRIS A-40 devices before 48250501 allows a remote attacker to get full access to a device via the /password.jsn URI...