medium6.5
CVE-2017-15583
The embedded web server on ABB Fox515T 1.0 devices is vulnerable to Local File Inclusion.
Impact
The embedded web server on ABB Fox515T 1.0 devices is vulnerable to Local File Inclusion. It accepts a parameter that specifies a file for display or for use as a template. The filename is not validated; an attacker could retrieve any file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hitachienergy | Fox515t Firmware | through r.1.0_ics10 |