eaton_lighting_systems - MidnightBSD Security Advisories

Advisories for eaton_lighting_systems

CVE-2016-0871 MEDIUM

Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to read the configuration file, and consequently discover credentials, via a direct request.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-200,

Products Affected

Vendor	Product	Version
eaton_lighting_systems	eg2_web_control	*

CVE-2016-2272 MEDIUM

Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-284,

Products Affected

Vendor	Product	Version
eaton_lighting_systems	eg2_web_control	*