CVE-2016-9368

Eaton xComfort Ethernet Communication Interface (ECI) versions 1.07 and earlier are affected by an improper access control flaw (CWE-284). By requesting a specific URL on the webserver, an unauthenticated remote attacker could access files, including backups and system logs, without authenticatio...