Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to bypass intended access restrictions by disregarding this header and processing the response body.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://ics-cert.us-cert.gov/advisories/ICSA-15-321-01 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: icscert
Published: 2015-11-19T11:00:00
Updated: 2024-08-06T08:06:31.379Z
Reserved: 2015-10-22T00:00:00
Link: CVE-2015-7910
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2015-11-19T11:59:01.657
Modified: 2015-11-19T19:08:32.473
Link: CVE-2015-7910
Redhat
No data.