Description
eWON devices with firmware before 10.1s0 omit RBAC for I/O server information and status requests, which allows remote attackers to obtain sensitive information via an unspecified URL.
Advisories 1
- ICSA-15-351-03 eWON Vulnerabilities CISA ICS & IT advisories · Jun 9, 2025
References
- 20151224 eWON sa Industrial router - Multiple Vulnerabilities mailing-list
- http://packetstormsecurity.com/files/135069/eWON-XSS-CSRF-Session-Management-RBAC-Issues.html
- http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01
- https://ics-cert.us-cert.gov/advisories/ICSA-15-351-03
- 79625 vdb-entry