CVE-2015-7926

Critical

Published: 23/12/2015(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

eWON devices with firmware before version 10.1s0 omit RBAC for I/O server information and status requests, allowing remote attackers to obtain sensitive information via an unspecified URL.

Risk Assessment

The lack of proper access control mechanisms may lead to the disclosure of confidential data, posing a serious security threat to the organization.

Recommendation

It is recommended to update eWON devices' firmware to version 10.1s0 or later to implement appropriate RBAC security measures.

Original NVD description (English source)

eWON devices with firmware before 10.1s0 omit RBAC for I/O server information and status requests, which allows remote attackers to obtain sensitive information via an unspecified URL.