Description
Cross-site scripting (XSS) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Advisories 1
- ICSA-15-351-03 eWON Vulnerabilities CISA ICS & IT advisories · Jun 9, 2025
References
- 20151224 eWON sa Industrial router - Multiple Vulnerabilities mailing-list
- http://packetstormsecurity.com/files/135069/eWON-XSS-CSRF-Session-Management-RBAC-Issues.html
- http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01
- https://ics-cert.us-cert.gov/advisories/ICSA-15-351-03
- 79625 vdb-entry