CVE-2015-7928

High

Published: 23/12/2015(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

eWON devices with firmware before version 10.1s0 lack an off autocomplete attribute for the password field, making it easier for remote attackers to gain access by leveraging an unattended workstation.

Risk Assessment

The absence of proper password field security can lead to unauthorized access to systems, posing a serious threat to the organization's security.

Recommendation

It is recommended to update eWON devices' firmware to version 10.1s0 or newer to implement appropriate security measures for the password field.

Other vulnerabilities in Urządzenia eWON z firmware przed wersją 10.1s0

CVE-2015-7926Critical
eWON devices with firmware before version 10.1s0 omit RBAC for I/O server information and status requests, allowing remote attackers to obtain sensitive information via an unspecified URL.

Original NVD description (English source)

eWON devices with firmware before 10.1s0 do not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.