EUVD-2015-1145

Malware in sbrugna...

CVE-2015-1002

IniNet embeddedWebServer aka eWebServer before 2.02 mishandles URL encoding, which allows remote attackers to write to or delete files via a crafted string...

Directory traversal

Directory traversal vulnerability in IniNet embeddedWebServer aka eWebServer before 2.02 allows remote attackers to read arbitrary files via a crafted pathname...

PT-2015-3053

Name of the Vulnerable Software and Affected Versions IniNet Solutions GmbH's SCADA Web Server versions prior to 2.02 IniNet embeddedWebServer aka eWebServer versions prior to 2.02 Description The issue is caused by multiple stack-based buffer overflows in the IniNet embeddedWebServer. Exploitati...

PT-2015-5020

Name of the Vulnerable Software and Affected Versions IniNet embeddedWebServer aka eWebServer versions prior to 2.02 Description A directory traversal issue allows remote attackers to read arbitrary files by providing a crafted pathname. Recommendations For versions prior to 2.02, update to versi...

PT-2015-5019

Name of the Vulnerable Software and Affected Versions IniNet embeddedWebServer aka eWebServer versions prior to 2.02 Description The issue arises from the mishandling of URL encoding, allowing remote attackers to write to or delete files by using a crafted string. Recommendations For versions pri...

PT-2015-5021

Name of the Vulnerable Software and Affected Versions IniNet embeddedWebServer aka eWebServer versions prior to 2.02 Description The issue allows context-dependent attackers to obtain sensitive information due to the use of cleartext for password storage. Recommendations For versions prior to 2.0...

CVE-2015-1005: Exposure of Sensitive Information to an Unauthorized Actor

IniNet embeddedWebServer aka eWebServer before 2.02 for Windows CE uses cleartext for password storage, which allows context-dependent attackers to obtain sensitive information via unspecified vectors...