URL Encoding Vulnerability in IniNet embeddedWebServer
CVE-2015-1002

Currently unrated

Key Information:

Vendor

Ininet Solutions

Status
Scada Web Server
Vendor
CVE Published:
25 October 2015

What is CVE-2015-1002?

The IniNet embeddedWebServer (also referred to as eWebServer) prior to version 2.02 is susceptible to an improper input validation vulnerability, where incorrect handling of URL encoding can be exploited by remote attackers. This oversight allows for unauthorized file operations, including the ability to write to or delete files on the vulnerable system through the injection of specially crafted strings in HTTP requests.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://ics-cert.us-cert.gov/advisories/ICSA-15-293-02
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.