The Configuration pages in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway for user profiles and services transfer the password in plaintext (although hidden when displayed).
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.