What’s Vulnerable › Vulnerabilities

CVE-2015-7924

• Severity: high (CVSS 8.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-12-23 · updated 2026-06-17

Description

eWON devices with firmware before 10.1s0 do not trigger the discarding of browser session data in response to a log-off action, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

Affected products

• Ewon Firmware: through 10.0s0

References

• http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01
• http://seclists.org/fulldisclosure/2015/Dec/118
• http://www.securityfocus.com/bid/79625
• https://ics-cert.us-cert.gov/advisories/ICSA-15-351-03
• http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01
• http://seclists.org/fulldisclosure/2015/Dec/118
• http://www.securityfocus.com/bid/79625
• https://ics-cert.us-cert.gov/advisories/ICSA-15-351-03

Get alerted when CVE-2015-7924 or the next vulnerability affects your stack