PT-2015-7676

CVE-2015-7929

·

Published

2015-12-23

·

Updated

2016-12-07

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions eWON devices with firmware through 10.1s0
Description The issue allows remote attackers to obtain sensitive information by reading web-server access logs, web-server Referer logs, or the browser history, due to the support of unspecified GET requests.
Recommendations For eWON devices with firmware through 10.1s0, consider restricting access to the web-server logs and browser history until a patch is available. As a temporary workaround, limit the use of the web-server to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾