CVE-2015-7927
MEDIUMeWON <10.1s0 - XSS
Title source: llmDescription
Cross-site scripting (XSS) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References (5)
Scores
CVSS v3
6.1
EPSS
0.0054
EPSS Percentile
67.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Classification
CWE
CWE-79
Status
draft
Affected Products (1)
ewon/ewon_firmware
< 10.0s0
Timeline
Published
Dec 23, 2015
Tracked Since
Feb 18, 2026