Description
An issue was discovered in Eaton xComfort Ethernet Communication Interface (ECI) Versions 1.07 and prior. By accessing a specific uniform resource locator (URL) on the webserver, a malicious user may be able to access files without authenticating.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Eaton xComfort Ethernet Communication Interface | Eaton xComfort Ethernet Communication Interface | — |
Advisories 1
- ICSA-17-061-01 ICSA-17-061-01_Eaton xComfort Ethernet Communication Interface CISA ICS & IT advisories · Mar 2, 2017