CVE-2015-7900

Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote attackers to obtain sensitive debugging information by entering a crafted URL to trigger an exception, and then visiting a certain status page.

Score

CVSS 2.0 4.3 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2015-10-28

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Mango Automation (Infinite Automation Systems)

References

• https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02