CVE-2015-7931 Information disclosure in n/a
Man-in-the-middle attackers can spoof devices and read sensitive cleartext data because the Java client lacks authentication and SSL support.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2015-7931?
CVE-2015-7931 is a high-severity vulnerability in n/a, published on 24 Dec 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station does not authenticate the station device, which allows man-in-the-middle attackers to spoof devices and obtain sensitive information by reading cleartext packet data, related to the lack of SSL support.
Which versions are affected by CVE-2015-7931?
It affects 1 product.
Products include Adcon A840 Telemetry Gateway Base Station Firmware.
How do I fix CVE-2015-7931?
No fix has been published for CVE-2015-7931 yet. Limit exposure of the affected software until one is available.
Is CVE-2015-7931 being exploited?
There is no known exploitation of CVE-2015-7931 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-325m-r869-rj99.