CVE-2015-7931

8.7 highEPSS 1.3%

The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station does not authenticate the station device, which allows man-in-the-middle attackers to spoof devices and obtain sensitive information by reading cleartext packet data, related to the lack of SSL support.

Severity

CVSS 3.0

8.7 high

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWEs: CWE-20, CWE-200
Published: 2015-12-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adcon:a840_telemetry_gateway_base_station_firmware

References

http://www.securityfocus.com/bid/79345
https://ics-cert.us-cert.gov/advisories/ICSA-15-349-01
http://www.securityfocus.com/bid/79345
https://ics-cert.us-cert.gov/advisories/ICSA-15-349-01

Check your stack JSON