What’s Vulnerable › Vulnerabilities

CVE-2015-7910

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-11-19 · updated 2026-06-17
• Weakness: CWE-200

Description

Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to bypass intended access restrictions by disregarding this header and processing the response body.

Affected products

• Exemys Telemetry Web Server: all versions

References

• https://ics-cert.us-cert.gov/advisories/ICSA-15-321-01
• https://ics-cert.us-cert.gov/advisories/ICSA-15-321-01

Get alerted when CVE-2015-7910 or the next vulnerability affects your stack