Description
eWON devices with firmware before 10.1s0 do not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
Advisories 1
- ICSA-15-351-03 eWON Vulnerabilities CISA ICS & IT advisories · Jun 9, 2025
References
- 20151224 eWON sa Industrial router - Multiple Vulnerabilities mailing-list
- http://packetstormsecurity.com/files/135069/eWON-XSS-CSRF-Session-Management-RBAC-Issues.html
- http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01
- https://ics-cert.us-cert.gov/advisories/ICSA-15-351-03
- 79625 vdb-entry