Required CVE Record Information
Description
MicroSeven MYM71080i-B 2.0.5 through 2.0.20 devices send admin credentials in cleartext to pnp.microseven.com TCP port 7007. An attacker on the same network as the device can capture these credentials.
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 2 Total
- https://blog.microseven.com x_transferred
- https://cybergladius.com/cve-2021-29255-vulnerability-disclosure/ x_transferred