SB2020012108 - Information disclosure in Westermo MRD-315
Published: January 21, 2020
Security Bulletin ID
SB2020012108
Severity
Medium
Patch available
NO
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Information disclosure (CVE-ID: CVE-2020-7227)
The vulnerability allows a remote user to gain access to potentially sensitive information.
The vulnerability exists due to the affected device processes requests that lack certain mandatory parameters. A remote user can retrieve the source code of different functions of the web application.
This vulnerability affects ifaces-diag.asp, system.asp, backup.asp, sys-power.asp, ifaces-wls.asp, ifaces-wls-pkt.asp, and ifaces-wls-pkt-adv.asp.
Remediation
Cybersecurity Help is not aware of any official remediation provided by the vendor.