Ewon Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:ewon:ewon_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Ewon (1c2e4594-4818-5864-b1d2-fbae63edec2b) |
|---|---|
| Product | Ewon Firmware (6246dda5-8ef8-588d-a417-e23501744392) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-7929 |
vulnerable | 2026-06-08 05:07:02.356363 |
Details available
eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history.
Published: 2015-12-23T11:00:00.000Z
Updated: 2024-08-06T08:06:31.189Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7928 |
vulnerable | 2026-06-08 05:07:02.356039 |
Details available
eWON devices with firmware before 10.1s0 do not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
Published: 2015-12-23T11:00:00.000Z
Updated: 2025-11-04T16:09:06.301Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7927 |
vulnerable | 2026-06-08 05:07:02.355711 |
Details available
Cross-site scripting (XSS) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2015-12-23T11:00:00.000Z
Updated: 2024-08-06T08:06:31.032Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7926 |
vulnerable | 2026-06-08 05:07:02.355378 |
Details available
eWON devices with firmware before 10.1s0 omit RBAC for I/O server information and status requests, which allows remote attackers to obtain sensitive information via an unspecified URL.
Published: 2015-12-23T11:00:00.000Z
Updated: 2024-08-06T08:06:30.929Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7925 |
vulnerable | 2026-06-08 05:07:02.355000 |
Details available
Cross-site request forgery (CSRF) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to hijack the authentication of administrators for requests that trigger firmware upload, removal of configuration data, or a reboot.
Published: 2015-12-23T11:00:00.000Z
Updated: 2024-08-06T08:06:31.138Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7924 |
vulnerable | 2026-06-08 05:07:02.354576 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.