CVE-2015-7910

Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to bypass intended access restrictions by disregarding this header and processing the response body.

Score

CVSS 2.0 7.8 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2015-11-19

Last modified

2024-08-06

Weaknesses

CWE-200, CWE-284

Affected products

• Telemetry Web Server (Exemys)

References

• https://ics-cert.us-cert.gov/advisories/ICSA-15-321-01