CVE-2018-16060

Description

Mitsubishi Electric Europe B.V. SmartRTU devices allow remote attackers to obtain sensitive information (directory listing and source code) via a direct request to the /web URI.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-7917

https://drive.google.com/open?id=1QMHwTnBbIqrTkR0NEpnTKssYdi8vRsHH

http://packetstormsecurity.com/files/164538/Mitsubishi-Electric-INEA-SmartRTU-Source-Code-Disclosure.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS