Honeywell 93gas Detector Path Traversal Vulnerability (CVE-2015-7907)

Honeywell 93gas Detector Path Traversal Vulnerability (CVE-2015-7907)

Affected Systems:

Honeywell Midas gas detectors <1.13b3
Honeywell Midas Black gas detectors <2.13b3
Description:

CVE (CAN) ID: CVE-2015-7907

Midas and Midas Black gas detectors are detectors used to test toxic gases, combustible gases, and external gases.

The directory traversal vulnerability exists in the web server of versions earlier than Honeywell set up as "proxygas detectors 1.13b3" and "proxygas detectors 2.13b3". Remote attackers can exploit this vulnerability to bypass authentication and write configuration files or trigger tests.

<* Source: Maxim Rupp
*>

Suggestion:

Vendor patch:

Honeywell
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.honeywellanalytics.com/en-ca/products/Midas