Required CVE Record Information
Description
The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network, which can be easily spoofed and used to log in to make operational changes to the system.
CVSS 1 Total
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.5 | HIGH | 3.1 | CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Credits
- Yuval Ardon and Roman Dvorkin of OTORIO reported this vulnerability to CISA
References 1 Total
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.