Cross site scripting

2019-12-0618:15:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.8%

JSON

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Passwords are stored in cleartext and can be read by anyone with access to the device.

CPENameOperatorVersion
ie-sw-pl08m-6tx-2sc_firmwarele3.3.8
ie-sw-pl08m-6tx-2scs_firmwarele3.3.8
ie-sw-pl08m-6tx-2st_firmwarele3.3.8
ie-sw-pl08m-8tx_firmwarele3.3.8
ie-sw-pl08mt-6tx-2sc_firmwarele3.3.8
ie-sw-pl08mt-6tx-2scs_firmwarele3.3.8
ie-sw-pl08mt-6tx-2st_firmwarele3.3.8
ie-sw-pl08mt-8tx_firmwarele3.3.8
ie-sw-pl09m-5gc-4gt_firmwarele3.3.4
ie-sw-pl09mt-5gc-4gt_firmwarele3.3.4

Name	Operator	Version
ie-sw-pl08m-6tx-2sc_firmware	le	3.3.8
ie-sw-pl08m-6tx-2scs_firmware	le	3.3.8
ie-sw-pl08m-6tx-2st_firmware	le	3.3.8
ie-sw-pl08m-8tx_firmware	le	3.3.8
ie-sw-pl08mt-6tx-2sc_firmware	le	3.3.8
ie-sw-pl08mt-6tx-2scs_firmware	le	3.3.8
ie-sw-pl08mt-6tx-2st_firmware	le	3.3.8
ie-sw-pl08mt-8tx_firmware	le	3.3.8
ie-sw-pl09m-5gc-4gt_firmware	le	3.3.4
ie-sw-pl09mt-5gc-4gt_firmware	le	3.3.4