Skip to content
OpenAdvisories
Critical ICSA-15-351-03 6 CVEs

eWON Vulnerabilities

Published Sep 19, 2015 · Updated Jun 9, 2025 · Revision 2

Vendor: eWON Product: sa industrial router firmware

Vulnerabilities 6

  • Unscored —
    CVE-2015-7924

    eWON devices with firmware before 10.1s0 do not trigger the discarding of browser session data in response to a log-off…

  • Unscored —
    CVE-2015-7925

    Cross-site request forgery (CSRF) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to…

  • Unscored —
    CVE-2015-7926

    eWON devices with firmware before 10.1s0 omit RBAC for I/O server information and status requests, which allows remote …

  • Unscored —
    CVE-2015-7927

    Cross-site scripting (XSS) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to inject…

  • Unscored —
    CVE-2015-7928

    eWON devices with firmware before 10.1s0 do not have an off autocomplete attribute for a password field, which makes it…

  • Unscored —
    CVE-2015-7929

    eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtai…

Revision history

  1. #2

    Advisory converted into a CSAF

  2. #1

    Initial Publication

References