IniNet embeddedWebServer (aka eWebServer) before 2.02 mishandles URL encoding, which allows remote attackers to write to or delete files via a crafted string.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://ics-cert.us-cert.gov/advisories/ICSA-15-293-02 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: icscert
Published: 2015-10-25T01:00:00
Updated: 2024-08-06T04:26:11.577Z
Reserved: 2015-01-10T00:00:00
Link: CVE-2015-1002
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2015-10-25T02:59:01.523
Modified: 2015-10-27T01:04:01.577
Link: CVE-2015-1002
Redhat
No data.