CVE-2016-0871

High

Published: 06/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Eaton Lighting EG2 Web Control version 4.04P and earlier allows remote attackers to read the configuration file, potentially exposing credentials.

Risk Assessment

The exposure of credentials may lead to unauthorized access to the system, posing a significant security risk to the organization.

Recommendation

It is recommended to update to the latest software version to mitigate this vulnerability and restrict access to the web interface.

Other vulnerabilities in Eaton Lighting EG2 Web Control

CVE-2016-2272High
Eaton Lighting EG2 Web Control version 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie.

Original NVD description (English source)

Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to read the configuration file, and consequently discover credentials, via a direct request.