Design/Logic Flaw

2016-02-0605:59:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.6%

JSON

Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network.

CPENameOperatorVersion
moduweb_visionle1.5.5

CPE	Name	Operator	Version
	moduweb_vision	le	1.5.5

References

seclists.org/fulldisclosure/2016/Feb/25

ics-cert.us-cert.gov/advisories/ICSA-16-033-01