PatchTheCVEewon vulnerabilities
Recent CVEs affecting ewon products. 6 tracked.
ewon has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 6. Most recent: 2015-12-23. Highest priority: CVE-2015-7926 (score 57/100).
- CVE-2015-7929 MEDIUM 4.3 UPGRADE eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers
- CVE-2015-7928 HIGH 8.5 UPGRADE eWON devices with firmware before 10.1s0 do not have an off autocomplete attribute for a password field, which
- CVE-2015-7927 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers
- CVE-2015-7926 CRITICAL 9.9 UPGRADE eWON devices with firmware before 10.1s0 omit RBAC for I/O server information and status requests, which allow
- CVE-2015-7925 HIGH 8.0 UPGRADE Cross-site request forgery (CSRF) vulnerability on eWON devices with firmware through 10.1s0 allows remote att
- CVE-2015-7924 HIGH 8.8 UPGRADE eWON devices with firmware before 10.1s0 do not trigger the discarding of browser session data in response to
FAQ
How do I fix ewon vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ewon being exploited right now?
None of the tracked ewon CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ewon CVE should I patch first?
CVE-2015-7926 currently ranks highest (57/100): eWON devices with firmware before 10.1s0 omit RBAC for I/O server information and status requests, which allow.