VYPR
← All advisories
High severity8.6NVD Advisory· Published Dec 21, 2015· Updated Jun 17, 2026

CVE-2015-7907

CVE-2015-7907

Description

Directory traversal vulnerability in the web server on Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allows remote attackers to bypass authentication, and write to a configuration file or trigger a calibration or test, via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Honeywell/Midas Black Firmware3 versions
    cpe:2.3:o:honeywell:midas_black_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:honeywell:midas_black_firmware:*:*:*:*:*:*:*:*range: <=2.13b1
    • cpe:2.3:o:honeywell:midas_firmware:*:*:*:*:*:*:*:*range: <=1.13b1
    • (no CPE)range: <2.13b3
  • Mid.as/Midasllm-fuzzy
    Range: <1.13b3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.