VULNERABILITY INTELLIGENCE

CVE-2019-15859

CVSS score10 HIGH

EPSS probability31.49%

CISA KEVNot currently listed

Published2019-10-09

Last modified2026-06-17

Description

Password disclosure in the web interface on socomec DIRIS A-40 devices before 48250501 allows a remote attacker to get full access to a device via the /password.jsn URI.