Lucene search
PRIOn knowledge basePRION:CVE-2021-23846HistoryJun 18, 2021 - 2:15 p.m.
Design/Logic Flaw
2021-06-1814:15:00
PRIOn knowledge base
www.prio-n.com
6
When using http protocol, the user password is transmitted as a clear text parameter for which it is possible to be obtained by an attacker through a MITM attack. This will be fixed starting from Firmware version 3.11.5, which will be released on the 30th of June, 2021.
| CPE | Name | Operator | Version |
|---|---|---|---|
| b426_firmware | eq | 03.01.0004 | |
| b426_firmware | eq | 03.02.002 | |
| b426_firmware | eq | 03.03.0009 | |
| b426_firmware | eq | 03.05.0003 |
Related
cve
cve
CVE-2021-23846
2021-06-18 14:15:07
nvd
nvd
CVE-2021-23846
2021-06-18 14:15:07
cvelist
cvelist
CVE-2021-23846 B426 Credential Disclosure
2021-05-28 00:00:00
nessus
nessus
zdi
zdi
Bosch B426 Web Configuration Credential Information Disclosure Vulnerability
2021-06-02 00:00:00