Vulnerabilities > CVE-2015-1002 - Unspecified vulnerability in Ininet Solutions Scada web Server

047910
CVSS 6.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
ininet-solutions

Summary

IniNet embeddedWebServer (aka eWebServer) before 2.02 mishandles URL encoding, which allows remote attackers to write to or delete files via a crafted string. <a href="https://cwe.mitre.org/data/definitions/177.html">CWE-177: Improper Handling of URL Encoding (Hex Encoding)</a>

Vulnerable Configurations

Part Description Count
Application
Ininet_Solutions
1