CVE-2015-6471: Infoleak
Published Dec 23, 2015
·Updated
Eaton Cooper Power Systems ProView 4.x and 5.x before 5.1 on Form 6 controls and Idea and IdeaPLUS relays does not properly initialize padding fields in Ethernet packets, which allows remote attackers to obtain sensitive information by reading packet data.
Affected Software
12 affected components
Eaton ProView=4.0
Eaton ProView=5.0
Eaton ProView=5.0.1
Eaton ProView=5.0.2
Eaton ProView=5.0.3
Eaton ProView=5.0.4
Eaton ProView=5.0.5
Eaton ProView=5.0.6
Eaton ProView=5.0.7
Eaton ProView=5.0.8
Eaton ProView=5.0.9
Eaton ProView=5.0.10
Event History
Dec 23, 2015
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-6471?
CVE-2015-6471 is classified as a medium severity vulnerability due to the potential for sensitive data exposure.
2
How do I fix CVE-2015-6471?
To fix CVE-2015-6471, upgrade Eaton ProView to version 5.1 or later.
3
What versions of Eaton ProView are affected by CVE-2015-6471?
Eaton ProView versions 4.x and 5.x prior to 5.1 are affected by CVE-2015-6471.
4
What type of attack does CVE-2015-6471 allow?
CVE-2015-6471 allows remote attackers to obtain sensitive information by reading uninitialized padding fields in Ethernet packet data.
5
Is CVE-2015-6471 a remote vulnerability?
Yes, CVE-2015-6471 is considered a remote vulnerability as it can be exploited over a network.