CVE-2016-9368: High severity eaton xcomfort ethernet communication interface vulnerability
An issue was discovered in Eaton xComfort Ethernet Communication Interface (ECI) Versions 1.07 and prior. By accessing a specific uniform resource locator (URL) on the webserver, a malicious user may be able to access files without authenticating.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9368?
CVE-2016-9368 is classified as a medium severity vulnerability due to unauthorized access to files.
How do I fix CVE-2016-9368?
To mitigate CVE-2016-9368, it is recommended to upgrade the Eaton xComfort Ethernet Communication Interface to a version later than 1.07.
What does CVE-2016-9368 exploit?
CVE-2016-9368 exploits the lack of authentication in the Eaton xComfort Ethernet Communication Interface allowing access to files via a specific URL.
Who is affected by CVE-2016-9368?
CVE-2016-9368 affects users of Eaton xComfort Ethernet Communication Interface versions 1.07 and earlier.
What can a malicious user do with CVE-2016-9368?
A malicious user can potentially access sensitive files on the Eaton xComfort Ethernet Communication Interface without authentication.