CVE-2015-1001: Multiple stack-based buffer overflows in IniNet embeddedWebServer (aka eWebServer) before 2.02 allow remote at

This month

HIGH 10.0MITIGATE

CVE-2015-1001 is a high-severity flaw (CVSS 10.0) affecting scada web server. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Multiple stack-based buffer overflows in IniNet embeddedWebServer (aka eWebServer) before 2.02 allow remote attackers to execute arbitrary code via a long field in an HTTP request.

Why this priority

Critical severity
EPSS top 9%: very likely to be exploited

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	10.0 (High)
EPSS exploit chance	4.1% (top 9%)
CISA exploited list	No
Weakness	CWE-119
Published	2015-10-25
Last modified	2026-06-17

Publisher (CNA): ICS-CERT · Vendor: ininet solutions

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2015-10-25 02:59 UTCPublished CVE record published
2026-06-17 00:21 UTCUpdated Record last modified

ininet solutions scada web server MITIGATE

Affected: all versions

Fixed in: no fixed release known

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy scada-web-server || rpm -q scada-web-server || scada-web-server --version

No fixed or unaffected release known

Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2015-1001?

scada web server: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2015-1001 being exploited?

CVE-2015-1001 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2015-1001 affect?

CVE-2015-1001 affects scada web server. Severity is high (CVSS 10.0). Multiple stack-based buffer overflows in IniNet embeddedWebServer (aka eWebServer) before 2.02 allow remote attackers to execute arbitrary code via a long field in an HTTP request.

How urgent is CVE-2015-1001?

Priority 58/100. Critical severity; EPSS top 9%: very likely to be exploited

Related CVEs

CVE-2017-12694 HIGH 7.5 MITIGATE A Directory Traversal issue was discovered in SpiderControl SCADA Web Server
CVE-2015-1005 LOW 2.1 MITIGATE IniNet embeddedWebServer (aka eWebServer) before 2.02 for Windows CE uses cleartext for password storage, whic
CVE-2015-1003 MEDIUM 5.0 MITIGATE Directory traversal vulnerability in IniNet embeddedWebServer (aka eWebServer) before 2.02 allows remote attac
CVE-2015-1002 MEDIUM 6.4 MITIGATE IniNet embeddedWebServer (aka eWebServer) before 2.02 mishandles URL encoding, which allows remote attackers t

References

← Back to latest CVEs