CVE-2020-10609

2020-07-2718:57:42

CWE-256

icscert

www.cve.org

AI Score

7.3

Confidence

High

EPSS

0.002

Percentile

52.9%

JSON

Grundfos CIM 500 v06.16.00 stores plaintext credentials, which may allow sensitive information to be read or allow modification to system settings by someone with access to the device.

CNA Affected

[
  {
    "product": "CIM 500",
    "vendor": "Grundfos",
    "versions": [
      {
        "lessThan": "v06.16.00",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsa-20-189-01