CVE-2019-15859

CRITICAL NUCLEI

Socomec DIRIS A-40 <48250501 - Info Disclosure

Title source: llm

Description

Password disclosure in the web interface on socomec DIRIS A-40 devices before 48250501 allows a remote attacker to get full access to a device via the /password.jsn URI.

Nuclei Templates (1)

Socomec DIRIS A-40 Devices Password Disclosure
CRITICALby geeknik

References (3)

Scores

CVSS v3 9.8
EPSS 0.8209
EPSS Percentile 99.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-200
Status published
Products (1)
socomec/diris_a-40_firmware < 48250501
Published Oct 09, 2019
Tracked Since Feb 18, 2026