Endress+Hauser MEAC300-FNADE4 Apache Directory Listing Vulnerability

A vulnerability has been identified in the Endress+Hauser MEAC300-FNADE4 web application, which is served by an Apache httpd web server with an insecure configuration. The server has unnecessary modules activated that can be exploited to enable directory listing, potentially exposing sensitive information.

Impact

Exploitation of this vulnerability could lead to unauthorized directory listing, allowing attackers to view files and directories that should not be accessible.

Remediation

Customers are strongly advised to update to the newest version of the MEAC300-FNADE4. General security practices should also be applied to minimize network exposure and restrict access to the device.