Remote Configuration File Disclosure in Eaton Lighting EG2 Web Control

CVE-2016-0871

Summary

The Eaton Lighting EG2 Web Control, versions 4.04P and earlier, contains a vulnerability that allows remote attackers to access sensitive configuration files. By sending a direct request, these attackers can potentially expose critical credentials stored within, leading to unauthorized access and further exploitation of the system. It is imperative for users of the affected products to implement security measures and update their systems to mitigate the risks associated with this vulnerability.

References