High

DATE	CVE	VULNERABILITY TITLE	RISK
2015-12-23	CVE-2015-7928	Information Exposure vulnerability in Ewon Firmware 10.0S0 eWON devices with firmware before 10.1s0 do not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation. network low complexity ewon CWE-200	8.5
2015-12-23	CVE-2015-7925	Cross-Site Request Forgery (CSRF) vulnerability in Ewon Firmware 10.0S0 Cross-site request forgery (CSRF) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to hijack the authentication of administrators for requests that trigger firmware upload, removal of configuration data, or a reboot. network low complexity ewon CWE-352	8.0
2015-12-23	CVE-2015-7924	Unspecified vulnerability in Ewon Firmware 10.0S0 eWON devices with firmware before 10.1s0 do not trigger the discarding of browser session data in response to a log-off action, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation. network low complexity ewon	8.8