CVE-2018-12926

Pharos Controls devices are affected by a remote information-disclosure vulnerability. An attacker can retrieve potentially sensitive data by issuing a direct request to the default/index.lsp or default/log.lsp URIs. The available sources describe this as an information-disclosure issue affecting...