CVE-2015-7907

Directory traversal vulnerability in the web server on Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allows remote attackers to bypass authentication, and write to a configuration file or trigger a calibration or test, via unspecified vectors.

• CWE-22

• https://ics-cert.us-cert.gov/advisories/ICSA-15-309-02Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-15-309-02Third Party Advisory, US Government Resource

Published

Dec 21, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7901Infinite Automation Mango Automation 2.5.x and 2.6.x through…
• CVE-2015-7902Infinite Automation Mango Automation 2.5.x and 2.6.x before …
• CVE-2015-7903SQL injection vulnerability in Infinite Automation Mango Aut…
• CVE-2015-7904Unrestricted file upload vulnerability in Infinite Automatio…
• CVE-2015-7905Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote at…
• CVE-2015-7906LOYTEC LIP-3ECTB 6.0.1, LINX-100, LVIS-3E100, and LIP-ME201 …
• CVE-2015-7908Honeywell Midas gas detectors before 1.13b3 and Midas Black …
• CVE-2015-7909Stack-based buffer overflow in Hospira Communication Engine …
• CVE-2015-7910Exemys Telemetry Web Server relies on an HTTP Location heade…
• CVE-2015-7911Saia Burgess PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60,…
• CVE-2015-7912The Ice Faces servlet in ag_server_service.exe in the AggreG…
• CVE-2015-7913ag_server_service.exe in the AggreGate Server Service in Tib…