CVE-2015-7927

Cross-site scripting XSS vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-7926

eWON devices with firmware before 10.1s0 omit RBAC for I/O server information and status requests, which allows remote attackers to obtain sensitive information via an unspecified URL...

CVE-2015-7929

eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtain sensitive information by reading 1 web-server access logs, 2 web-server Referer logs, or 3 the browser history...

CVE-2015-7927

Cross-site scripting XSS vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-7927

CVE-2015-7927 is a stored cross-site scripting (XSS) vulnerability in eWON industrial routers running firmware up to 10.1s0. The issue enables remote attackers to inject arbitrary web script or HTML via unspecified vectors in the device’s web interface. Affected product line is eWON routers; firm...

eWON Cross-Site Request Forgery Vulnerability

eWON is an industrial router product from eWON Belgium. A cross-site request forgery vulnerability exists in eWON using firmware versions prior to 10.1s0. An attacker could exploit this vulnerability to perform unauthorized operations with user privileges...

eWON Weak Session Management Vulnerability

eWON is an industrial router product from eWON Belgium. A security vulnerability exists in eWON using firmware versions prior to 10.1s0, which stems from the program retaining a session after a user logs out and logs in. An attacker could exploit the vulnerability to interact with the device usin...

eWON Cross-Site Scripting Vulnerability

eWON is an industrial router product from eWON Belgium. A cross-site scripting vulnerability exists in eWON using firmware versions prior to 10.1s0. An attacker can exploit this vulnerability to execute arbitrary script or HTML code on a web server or application...