CVE-2015-6471

Published: Dec 23, 2015Modified: May 6, 2026

5.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Eaton Cooper Power Systems ProView 4.x and 5.x before 5.1 on Form 6 controls and Idea and IdeaPLUS relays does not properly initialize padding fields in Ethernet packets, which allows remote attackers to obtain sensitive information by reading packet data.

Affected (12)

Products: Eaton: Proview

Eaton

1 product

Proview

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Eaton Proview	Version 4.0
Eaton Proview	Version 5.0.10
Eaton Proview	Version 5.0.1
Eaton Proview	Version 5.0.2
Eaton Proview	Version 5.0.3
Eaton Proview	Version 5.0.4
Eaton Proview	Version 5.0.5
Eaton Proview	Version 5.0.6
Eaton Proview	Version 5.0.7
Eaton Proview	Version 5.0.8
Eaton Proview	Version 5.0.9
Eaton Proview	Version 5.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://ics-cert.us-cert.gov/advisories/ICSA-15-295-01

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://ics-cert.us-cert.gov/advisories/ICSA-15-295-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.