CVE-2015-7926

CVE-2015-7926 concerns eWON industrial routers. Affected: firmware versions prior to 10.1s0. Root cause: RBAC for I/O server information and status requests is omitted, permitting an unauthenticated, remote attacker to obtain sensitive information via an unspecified URL. Impact, as stated: inform...

CVE-2015-7928

CVE-2015-7928 affects eWON devices with firmware versions earlier than 10.1s0. The root cause is a missing autocomplete attribute (off) for a password field in the web UI, enabling an attacker to potentially obtain access from an unattended workstation. The vulnerability is classified as remote-e...

CVE-2015-7924

CVE-2015-7924 affects eWON industrial routers with firmware versions prior to 10.1s0. The root cause is weak session management: the software retains the user session in the browser after a log-off action, allowing a logged-in user’s session to persist on an unattended workstation. The vulnerabil...

CVE-2015-7925

CVE-2015-7925 is a CSRF vulnerability affecting eWON industrial routers with firmware prior to 10.1s0. The web server allows actions to be triggered without anti-CSRF protections, enabling an attacker to perform administrator-level operations (e.g., firmware upload, configuration changes, reboot)...

CVE-2015-7927

CVE-2015-7927 is a stored cross-site scripting (XSS) vulnerability in eWON industrial routers running firmware up to 10.1s0. The issue enables remote attackers to inject arbitrary web script or HTML via unspecified vectors in the device’s web interface. Affected product line is eWON routers; firm...

CVE-2015-7929

CVE-2015-7929 affects eWON industrial routers with firmware up to and including 10.1s0. The issue arises from handling of GET requests, allowing remote attackers to read sensitive data such as web-server access logs, Referer logs, or browser history. Exploitation could be performed remotely due t...