CVE-2015-7902 EXPLOIT
5.0
MEDIUM · CVSS 2.0 · EPSS 3.5% (pctl 89)
Patch early
A public exploit exists.
Description
Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 provides different error messages for failed login attempts in unspecified circumstances, which allows remote attackers to obtain sensitive information via a series of requests.
Scoring
| CVSS | 5.0 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
| EPSS | 3.5% — more likely to be exploited than 89% of all CVEs |
| Weakness | CWE-200 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2015-10-28 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| infinite automation systems | mango automation |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Mango Automation 2.6.0 - Multiple Vulnerabilities | 2015-09-28 |
References
→ the Explorer · watch your stack · NVD