CVE-2015-7908

Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allow remote attackers to discover cleartext passwords by sniffing the network.

• CWE-200

• https://ics-cert.us-cert.gov/advisories/ICSA-15-309-02Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-15-309-02Third Party Advisory, US Government Resource

Published

Dec 21, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7902Infinite Automation Mango Automation 2.5.x and 2.6.x before …
• CVE-2015-7903SQL injection vulnerability in Infinite Automation Mango Aut…
• CVE-2015-7904Unrestricted file upload vulnerability in Infinite Automatio…
• CVE-2015-7905Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote at…
• CVE-2015-7906LOYTEC LIP-3ECTB 6.0.1, LINX-100, LVIS-3E100, and LIP-ME201 …
• CVE-2015-7907Directory traversal vulnerability in the web server on Honey…
• CVE-2015-7909Stack-based buffer overflow in Hospira Communication Engine …
• CVE-2015-7910Exemys Telemetry Web Server relies on an HTTP Location heade…
• CVE-2015-7911Saia Burgess PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60,…
• CVE-2015-7912The Ice Faces servlet in ag_server_service.exe in the AggreG…
• CVE-2015-7913ag_server_service.exe in the AggreGate Server Service in Tib…
• CVE-2015-7914Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remot…