Beveiligingsadvies

CVE-2021-3252

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-02-23 14:15:32
Laatst bijgewerkt 2024-08-03 16:53:16
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control. Credentials will always be returned in plain-text from the local server during the KACO XP100U authentication process, regardless of whatever passwords have been provided, which leads to an information disclosure vulnerability.