CVE-2015-6471

MEDIUM

Eaton ProView 4.x-5.x - Exposure of Sensitive Information via Ethernet Packet Padding

Title source: llm

Description

Eaton Cooper Power Systems ProView 4.x and 5.x before 5.1 on Form 6 controls and Idea and IdeaPLUS relays does not properly initialize padding fields in Ethernet packets, which allows remote attackers to obtain sensitive information by reading packet data.

References (1)

Core 1

Core References

Third Party Advisory, US Government Resource x_refsource_misc

https://ics-cert.us-cert.gov/advisories/ICSA-15-295-01

Scores

CVSS v3 5.3

EPSS 0.0111

EPSS Percentile 62.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-200

Status published

Products (12)

eaton/proview 4.0

eaton/proview 5.0

eaton/proview 5.0.1

eaton/proview 5.0.2

eaton/proview 5.0.3

eaton/proview 5.0.4

eaton/proview 5.0.5

eaton/proview 5.0.6

eaton/proview 5.0.7

eaton/proview 5.0.8

... and 2 more

Published Dec 23, 2015

Tracked Since Feb 18, 2026