Directory Traversal Vulnerability in Honeywell Midas Gas Detectors
CVE-2015-7907

8.6HIGH

Key Information:

Vendor

Honeywell

Status
Midas Black Firmware
Midas Firmware
Vendor
CVE Published:
21 December 2015

What is CVE-2015-7907?

A directory traversal vulnerability exists in the web server of Honeywell Midas gas detectors, which could allow remote attackers to bypass authentication mechanisms. This can lead to unauthorized access, enabling attackers to modify configuration files or initiate calibration and testing procedures through unspecified vectors. Systems affected include Midas gas detectors prior to version 1.13b3 and Midas Black gas detectors prior to version 2.13b3.

References

https://ics-cert.us-cert.gov/advisories/ICSA-15-309-02
x_refsource_MISC

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.