Ice Qube Thermal Management Center Authentication Bypass Vulnerability

Ice Qube Thermal Management Center is a thermal management application from Ice Qube USA. The program includes features such as email notifications, remote management, LCD display and temperature alarms. An authentication bypass vulnerability exists in Ice Qube Thermal Management Center versions...

CVE-2017-14026

In Ice Qube Thermal Management Center versions prior to version 4.13, the web application does not properly authenticate users which may allow an attacker to gain access to sensitive information...

CVE-2017-16714

CVE-2017-16714 affects Ice Qube Thermal Management Center prior to v4.13, where passwords are stored in plaintext in a file accessible without authentication. This is a credential-disclosure vulnerability impacting the Thermal Management Center software; the root cause is unprotected storage of c...

CVE-2017-16714: Plaintext Storage of a Password

In Ice Qube Thermal Management Center versions prior to version 4.13, passwords are stored in plaintext in a file that is accessible without authentication...

CVE-2017-14026: Improper Authentication

In Ice Qube Thermal Management Center versions prior to version 4.13, the web application does not properly authenticate users which may allow an attacker to gain access to sensitive information...

PT-2018-5614

Name of the Vulnerable Software and Affected Versions: Ice Qube Thermal Management Center versions prior to 4.13 Description: The web application in Ice Qube Thermal Management Center does not properly authenticate users, which may allow an attacker to gain access to sensitive information...

PT-2018-6310

Name of the Vulnerable Software and Affected Versions: Ice Qube Thermal Management Center versions prior to 4.13 Description: The issue concerns the storage of passwords in plaintext within a file that can be accessed without authentication, posing a significant security risk. Recommendations: Fo...

Ice Qube Thermal Management Center

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Ice Qube Equipment: Thermal Management Center Vulnerabilities: Improper Authentication, Unprotected Storage of Credentials 2. RISK EVALUATION Successful exploitation of these vulnerabilities could...