Описание
A cleartext transmission vulnerability exists in the WEBVIEW-M functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can sniff network traffic to trigger this vulnerability.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:socomec:diris_m-70_firmware:1.6.9:*:*:*:*:*:*:*
cpe:2.3:h:socomec:diris_m-70:-:*:*:*:*:*:*:*
EPSS
Процентиль: 10%
0.00034
Низкий
5.9 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-319
Связанные уязвимости
CVSS3: 5.9
github
2 месяца назад
A cleartext transmission vulnerability exists in the WEBVIEW-M functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can sniff network traffic to trigger this vulnerability.
EPSS
Процентиль: 10%
0.00034
Низкий
5.9 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-319