CVE-2016-9368CWE-284
An issue was discovered in Eaton xComfort Ethernet Communication Interface (ECI) Versions 1.07 and prior
published March 14, 2017
What it is
An issue was discovered in Eaton xComfort Ethernet Communication Interface (ECI) Versions 1.07 and prior. By accessing a specific uniform resource locator (URL) on the webserver, a malicious user may be able to access files without authenticating.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.01262 · 69.3th percentile
- Weakness
- CWE-284 · Improper Access Control
- Published
- 2017-03-14T09:02Z
EPSS history
Timeline