Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://seclists.org/fulldisclosure/2016/Feb/25 | mailing list |
https://ics-cert.us-cert.gov/advisories/ICSA-16-033-01 | third party advisory us government resource |