CVE-2015-7929
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2015-7929
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
eWON 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
eWON是比利时eWON公司的一款工业路由器产品。 使用10.1s0之前版本固件的eWON中存在信息泄露漏洞，该漏洞源于程序使用不安全的GET HTML命令代替POST命令。远程攻击者可通过读取Web服务器访问日志、Referer日志和浏览器历史利用该漏洞获取敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2015-7929
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2015-7929
请登录查看更多情报信息。
- https://ics-cert.us-cert.gov/advisories/ICSA-15-351-03x_refsource_MISC
- http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2015-7929
Same Patch Batch · n/a · 2015-12-23 · 13 CVEs total
| CVE-2015-7924 | eWON 安全漏洞 | |
| CVE-2015-7925 | eWON 跨站请求伪造漏洞 | |
| CVE-2015-7926 | eWON 信息泄露漏洞 | |
| CVE-2015-7927 | eWON 跨站脚本漏洞 | |
| CVE-2015-7928 | eWON 信息泄露漏洞 | |
| CVE-2015-6431 | Cisco IOS XE Software 资源管理错误漏洞 | |
| CVE-2015-6471 | Eaton Form 6 control和Idea/IdeaPLUS 安全漏洞 | |
| CVE-2015-6851 | EMC RSA SecurID Web Agent 权限许可和访问控制漏洞 | |
| CVE-2015-7911 | 多款Saia Burgess Controls设备信任管理漏洞 | |
| CVE-2015-7917 | Open Automation Software OPC Systems.NET 不可信搜索路径漏洞 | |
| CVE-2015-7935 | Motorola Solutions MOSCAD IP Gateway 输入验证漏洞 | |
| CVE-2015-7936 | Motorola Solutions MOSCAD SCADA IP Gateway 跨站请求伪造漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2015-7929
No comments yet