Search
Find a vulnerability
Search criteria
2 vulnerabilities found for midas by honeywell
VAR-201512-0011
Vulnerability from variot - Updated: 2025-04-13 23:22Directory traversal vulnerability in the web server on Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allows remote attackers to bypass authentication, and write to a configuration file or trigger a calibration or test, via unspecified vectors. Honeywell International Midas and Midas Black are gas detection equipment from Honeywell International. Multiple Honeywell Midas products are prone to directory-traversal and information-disclosure vulnerabilities. An attacker can exploit these issues using directory-traversal characters ('../') to access or read arbitrary files that contain sensitive information or to access files outside of the restricted directory or obtain sensitive information and perform other attacks
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201512-0011",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "midas",
"scope": "lte",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.13b1"
},
{
"model": "midas black",
"scope": "lte",
"trust": 1.0,
"vendor": "honeywell",
"version": "2.13b1"
},
{
"model": "midas",
"scope": null,
"trust": 0.8,
"vendor": "honeywell",
"version": null
},
{
"model": "midas black",
"scope": null,
"trust": 0.8,
"vendor": "honeywell",
"version": null
},
{
"model": "midas black",
"scope": "lt",
"trust": 0.8,
"vendor": "honeywell",
"version": "2.13b3"
},
{
"model": "midas",
"scope": "lt",
"trust": 0.8,
"vendor": "honeywell",
"version": "1.13b3"
},
{
"model": "international midas \u003c=1.13b1",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "international midas black \u003c=2.13b1",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "midas black",
"scope": "eq",
"trust": 0.6,
"vendor": "honeywell",
"version": "2.13b1"
},
{
"model": "midas",
"scope": "eq",
"trust": 0.6,
"vendor": "honeywell",
"version": "1.13b1"
},
{
"model": "midas black 2.13b1",
"scope": null,
"trust": 0.3,
"vendor": "honeywell",
"version": null
},
{
"model": "midas 1.13b1",
"scope": null,
"trust": 0.3,
"vendor": "honeywell",
"version": null
},
{
"model": "midas black 2.13b3",
"scope": "ne",
"trust": 0.3,
"vendor": "honeywell",
"version": null
},
{
"model": "midas 1.13b3",
"scope": "ne",
"trust": 0.3,
"vendor": "honeywell",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-07944"
},
{
"db": "BID",
"id": "78541"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006500"
},
{
"db": "CNNVD",
"id": "CNNVD-201512-037"
},
{
"db": "NVD",
"id": "CVE-2015-7907"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:honeywell:midas",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:honeywell:midas_black",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:honeywell:midas_black_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:honeywell:midas_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2015-006500"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Maxim Rupp",
"sources": [
{
"db": "BID",
"id": "78541"
}
],
"trust": 0.3
},
"cve": "CVE-2015-7907",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 6.4,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CVE-2015-7907",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 6.4,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CNVD-2015-07944",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 6.4,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "VHN-85868",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:N/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "LOW",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"exploitabilityScore": 3.9,
"id": "CVE-2015-7907",
"impactScore": 4.7,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2015-7907",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2015-7907",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2015-07944",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201512-037",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-85868",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-07944"
},
{
"db": "VULHUB",
"id": "VHN-85868"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006500"
},
{
"db": "CNNVD",
"id": "CNNVD-201512-037"
},
{
"db": "NVD",
"id": "CVE-2015-7907"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Directory traversal vulnerability in the web server on Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allows remote attackers to bypass authentication, and write to a configuration file or trigger a calibration or test, via unspecified vectors. Honeywell International Midas and Midas Black are gas detection equipment from Honeywell International. Multiple Honeywell Midas products are prone to directory-traversal and information-disclosure vulnerabilities. \nAn attacker can exploit these issues using directory-traversal characters (\u0027../\u0027) to access or read arbitrary files that contain sensitive information or to access files outside of the restricted directory or obtain sensitive information and perform other attacks",
"sources": [
{
"db": "NVD",
"id": "CVE-2015-7907"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006500"
},
{
"db": "CNVD",
"id": "CNVD-2015-07944"
},
{
"db": "BID",
"id": "78541"
},
{
"db": "VULHUB",
"id": "VHN-85868"
}
],
"trust": 2.52
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "ICS CERT",
"id": "ICSA-15-309-02",
"trust": 3.4
},
{
"db": "NVD",
"id": "CVE-2015-7907",
"trust": 3.4
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006500",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201512-037",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2015-07944",
"trust": 0.6
},
{
"db": "BID",
"id": "78541",
"trust": 0.3
},
{
"db": "SEEBUG",
"id": "SSVID-90017",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-85868",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-07944"
},
{
"db": "VULHUB",
"id": "VHN-85868"
},
{
"db": "BID",
"id": "78541"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006500"
},
{
"db": "CNNVD",
"id": "CNNVD-201512-037"
},
{
"db": "NVD",
"id": "CVE-2015-7907"
}
]
},
"id": "VAR-201512-0011",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-07944"
},
{
"db": "VULHUB",
"id": "VHN-85868"
}
],
"trust": 1.7
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-07944"
}
]
},
"last_update_date": "2025-04-13T23:22:22.548000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Midas \u30ac\u30b9\u691c\u77e5\u5668",
"trust": 0.8,
"url": "http://www.honeywellanalytics.com/ja-jp/products/Midas"
},
{
"title": "Patch for Honeywell International Midas and Midas Black Validation Bypass Vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/67704"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-07944"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006500"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-22",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-85868"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006500"
},
{
"db": "NVD",
"id": "CVE-2015-7907"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.4,
"url": "https://ics-cert.us-cert.gov/advisories/icsa-15-309-02"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7907"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-7907"
},
{
"trust": 0.3,
"url": "http://www.honeywellanalytics.com/en-ca/products/midas"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-07944"
},
{
"db": "VULHUB",
"id": "VHN-85868"
},
{
"db": "BID",
"id": "78541"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006500"
},
{
"db": "CNNVD",
"id": "CNNVD-201512-037"
},
{
"db": "NVD",
"id": "CVE-2015-7907"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2015-07944"
},
{
"db": "VULHUB",
"id": "VHN-85868"
},
{
"db": "BID",
"id": "78541"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006500"
},
{
"db": "CNNVD",
"id": "CNNVD-201512-037"
},
{
"db": "NVD",
"id": "CVE-2015-7907"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2015-12-07T00:00:00",
"db": "CNVD",
"id": "CNVD-2015-07944"
},
{
"date": "2015-12-21T00:00:00",
"db": "VULHUB",
"id": "VHN-85868"
},
{
"date": "2015-12-03T00:00:00",
"db": "BID",
"id": "78541"
},
{
"date": "2015-12-24T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-006500"
},
{
"date": "2015-12-04T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201512-037"
},
{
"date": "2015-12-21T11:59:09.190000",
"db": "NVD",
"id": "CVE-2015-7907"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2015-12-07T00:00:00",
"db": "CNVD",
"id": "CNVD-2015-07944"
},
{
"date": "2015-12-22T00:00:00",
"db": "VULHUB",
"id": "VHN-85868"
},
{
"date": "2015-12-03T00:00:00",
"db": "BID",
"id": "78541"
},
{
"date": "2015-12-24T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-006500"
},
{
"date": "2015-12-22T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201512-037"
},
{
"date": "2025-04-12T10:46:40.837000",
"db": "NVD",
"id": "CVE-2015-7907"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201512-037"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Honeywell Midas Operates on gas detector Web Server traversal vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2015-006500"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "path traversal",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201512-037"
}
],
"trust": 0.6
}
}
VAR-201512-0012
Vulnerability from variot - Updated: 2025-04-12 23:22Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allow remote attackers to discover cleartext passwords by sniffing the network. Honeywell International Midas and Midas Black are gas detection equipment from Honeywell International, USA. Multiple Honeywell Midas products are prone to directory-traversal and information-disclosure vulnerabilities. An attacker can exploit these issues using directory-traversal characters ('../') to access or read arbitrary files that contain sensitive information or to access files outside of the restricted directory or obtain sensitive information and perform other attacks. A remote attacker could exploit this vulnerability by sniffing the network to obtain clear text passwords
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201512-0012",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "midas",
"scope": "lte",
"trust": 1.0,
"vendor": "honeywell",
"version": "1.13b1"
},
{
"model": "midas black",
"scope": "lte",
"trust": 1.0,
"vendor": "honeywell",
"version": "2.13b1"
},
{
"model": "midas",
"scope": null,
"trust": 0.8,
"vendor": "honeywell",
"version": null
},
{
"model": "midas black",
"scope": null,
"trust": 0.8,
"vendor": "honeywell",
"version": null
},
{
"model": "midas black",
"scope": "lt",
"trust": 0.8,
"vendor": "honeywell",
"version": "2.13b3"
},
{
"model": "midas",
"scope": "lt",
"trust": 0.8,
"vendor": "honeywell",
"version": "1.13b3"
},
{
"model": "international midas \u003c=1.13b1",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "international midas black \u003c=2.13b1",
"scope": null,
"trust": 0.6,
"vendor": "honeywell",
"version": null
},
{
"model": "midas black",
"scope": "eq",
"trust": 0.6,
"vendor": "honeywell",
"version": "2.13b1"
},
{
"model": "midas",
"scope": "eq",
"trust": 0.6,
"vendor": "honeywell",
"version": "1.13b1"
},
{
"model": null,
"scope": "eq",
"trust": 0.4,
"vendor": "midas",
"version": "*"
},
{
"model": null,
"scope": "eq",
"trust": 0.4,
"vendor": "midas black",
"version": "*"
},
{
"model": "midas black 2.13b1",
"scope": null,
"trust": 0.3,
"vendor": "honeywell",
"version": null
},
{
"model": "midas 1.13b1",
"scope": null,
"trust": 0.3,
"vendor": "honeywell",
"version": null
},
{
"model": "midas black 2.13b3",
"scope": "ne",
"trust": 0.3,
"vendor": "honeywell",
"version": null
},
{
"model": "midas 1.13b3",
"scope": "ne",
"trust": 0.3,
"vendor": "honeywell",
"version": null
}
],
"sources": [
{
"db": "IVD",
"id": "6d5f744e-2351-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "6d61028c-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2015-07945"
},
{
"db": "BID",
"id": "78541"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006489"
},
{
"db": "CNNVD",
"id": "CNNVD-201512-036"
},
{
"db": "NVD",
"id": "CVE-2015-7908"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:honeywell:midas",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:honeywell:midas_black",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:honeywell:midas_black_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:honeywell:midas_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2015-006489"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Maxim Rupp",
"sources": [
{
"db": "BID",
"id": "78541"
}
],
"trust": 0.3
},
"cve": "CVE-2015-7908",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"id": "CVE-2015-7908",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 6.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2015-07945",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "NONE",
"baseScore": 6.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "6d5f744e-2351-11e6-abef-000c29c66e3d",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "NONE",
"baseScore": 6.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "6d61028c-2351-11e6-abef-000c29c66e3d",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"id": "VHN-85869",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2015-7908",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2015-7908",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2015-07945",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201512-036",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "IVD",
"id": "6d5f744e-2351-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "CRITICAL"
},
{
"author": "IVD",
"id": "6d61028c-2351-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-85869",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "6d5f744e-2351-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "6d61028c-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2015-07945"
},
{
"db": "VULHUB",
"id": "VHN-85869"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006489"
},
{
"db": "CNNVD",
"id": "CNNVD-201512-036"
},
{
"db": "NVD",
"id": "CVE-2015-7908"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allow remote attackers to discover cleartext passwords by sniffing the network. Honeywell International Midas and Midas Black are gas detection equipment from Honeywell International, USA. Multiple Honeywell Midas products are prone to directory-traversal and information-disclosure vulnerabilities. \nAn attacker can exploit these issues using directory-traversal characters (\u0027../\u0027) to access or read arbitrary files that contain sensitive information or to access files outside of the restricted directory or obtain sensitive information and perform other attacks. A remote attacker could exploit this vulnerability by sniffing the network to obtain clear text passwords",
"sources": [
{
"db": "NVD",
"id": "CVE-2015-7908"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006489"
},
{
"db": "CNVD",
"id": "CNVD-2015-07945"
},
{
"db": "BID",
"id": "78541"
},
{
"db": "IVD",
"id": "6d5f744e-2351-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "6d61028c-2351-11e6-abef-000c29c66e3d"
},
{
"db": "VULHUB",
"id": "VHN-85869"
}
],
"trust": 2.88
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2015-7908",
"trust": 3.8
},
{
"db": "ICS CERT",
"id": "ICSA-15-309-02",
"trust": 3.4
},
{
"db": "CNNVD",
"id": "CNNVD-201512-036",
"trust": 1.1
},
{
"db": "CNVD",
"id": "CNVD-2015-07945",
"trust": 1.0
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006489",
"trust": 0.8
},
{
"db": "BID",
"id": "78541",
"trust": 0.3
},
{
"db": "IVD",
"id": "6D5F744E-2351-11E6-ABEF-000C29C66E3D",
"trust": 0.2
},
{
"db": "IVD",
"id": "6D61028C-2351-11E6-ABEF-000C29C66E3D",
"trust": 0.2
},
{
"db": "SEEBUG",
"id": "SSVID-90018",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-85869",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "6d5f744e-2351-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "6d61028c-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2015-07945"
},
{
"db": "VULHUB",
"id": "VHN-85869"
},
{
"db": "BID",
"id": "78541"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006489"
},
{
"db": "CNNVD",
"id": "CNNVD-201512-036"
},
{
"db": "NVD",
"id": "CVE-2015-7908"
}
]
},
"id": "VAR-201512-0012",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "6d5f744e-2351-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "6d61028c-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2015-07945"
},
{
"db": "VULHUB",
"id": "VHN-85869"
}
],
"trust": 2.1
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 1.0
}
],
"sources": [
{
"db": "IVD",
"id": "6d5f744e-2351-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "6d61028c-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2015-07945"
}
]
},
"last_update_date": "2025-04-12T23:22:12.602000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Midas \u30ac\u30b9\u691c\u77e5\u5668",
"trust": 0.8,
"url": "http://www.honeywellanalytics.com/ja-jp/products/Midas"
},
{
"title": "Honeywell International Midas and Midas Black Password Verification Loophole Patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/67703"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-07945"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006489"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-200",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-85869"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006489"
},
{
"db": "NVD",
"id": "CVE-2015-7908"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.4,
"url": "https://ics-cert.us-cert.gov/advisories/icsa-15-309-02"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7908"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-7908"
},
{
"trust": 0.3,
"url": "http://www.honeywellanalytics.com/en-ca/products/midas"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-07945"
},
{
"db": "VULHUB",
"id": "VHN-85869"
},
{
"db": "BID",
"id": "78541"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006489"
},
{
"db": "CNNVD",
"id": "CNNVD-201512-036"
},
{
"db": "NVD",
"id": "CVE-2015-7908"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "6d5f744e-2351-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "6d61028c-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2015-07945"
},
{
"db": "VULHUB",
"id": "VHN-85869"
},
{
"db": "BID",
"id": "78541"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006489"
},
{
"db": "CNNVD",
"id": "CNNVD-201512-036"
},
{
"db": "NVD",
"id": "CVE-2015-7908"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2015-12-07T00:00:00",
"db": "IVD",
"id": "6d5f744e-2351-11e6-abef-000c29c66e3d"
},
{
"date": "2015-12-07T00:00:00",
"db": "IVD",
"id": "6d61028c-2351-11e6-abef-000c29c66e3d"
},
{
"date": "2015-12-07T00:00:00",
"db": "CNVD",
"id": "CNVD-2015-07945"
},
{
"date": "2015-12-21T00:00:00",
"db": "VULHUB",
"id": "VHN-85869"
},
{
"date": "2015-12-03T00:00:00",
"db": "BID",
"id": "78541"
},
{
"date": "2015-12-22T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-006489"
},
{
"date": "2015-12-04T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201512-036"
},
{
"date": "2015-12-21T11:59:10.220000",
"db": "NVD",
"id": "CVE-2015-7908"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2015-12-07T00:00:00",
"db": "CNVD",
"id": "CNVD-2015-07945"
},
{
"date": "2015-12-21T00:00:00",
"db": "VULHUB",
"id": "VHN-85869"
},
{
"date": "2015-12-03T00:00:00",
"db": "BID",
"id": "78541"
},
{
"date": "2015-12-22T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-006489"
},
{
"date": "2015-12-22T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201512-036"
},
{
"date": "2025-04-12T10:46:40.837000",
"db": "NVD",
"id": "CVE-2015-7908"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201512-036"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Honeywell Midas Vulnerability to obtain plaintext password in gas detector",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2015-006489"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "information disclosure",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201512-036"
}
],
"trust": 0.6
}
}