CVE:CVE-2015-7907
CNNVD:CNNVD-201512-037
Honeywell International Midas 1.13b1及之前版本和Midas Black 2.13b1及之前版本的Web服务器中存在目录遍历漏洞。远程攻击者可利用该漏洞绕过身份验证，写入配置文件，触发校准或测试进程。
solution:Upgrade honeywell midas_black_firmware to a higher version than 2.13b1,and avoid the version (,2.13b1]; Upgrade honeywell midas_firmware to a higher version than 1.13b1,and avoid the version (,1.13b1]