eWON devices with firmware before 10.1s0 omit RBAC for I/O server information and status requests, which allows remote attackers to obtain sensitive information via an unspecified URL. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Information Disclosure
Ewon Firmware
NVD
CVSS 3.0
9.9
EPSS
1.0%
Saia Burgess PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60, PCD3.Mxxx0, PCD7.D4xxD, PCD7.D4xxV, PCD7.D4xxWTPF, and PCD7.D4xxxT5F devices before 1.24.50 and PCD3.T665 and PCD3.T666 devices before. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Authentication Bypass
Pcd7 D4Xxv Vga Mb Firmware
Pcd7 D4Xxd Firmware
Pcd3 Mxxx0 Firmware
Pcd7 D4Xxd Svga Mb Firmware
+10
NVD
CVSS 3.0
9.1
EPSS
0.8%