CVE-2023-39172

CVE-2023-39172 affects SENEC ENBW Legacy Storage Box series (V1, V2, V3). The root cause is that the devices transmit sensitive information unencrypted over the network, enabling a remote unauthenticated attacker to capture and modify traffic. The NVD entry assigns a CRITICAL CVSS v3.1 score (9.1...

CVE-2023-39172 SENEC: Storage Box V1,V2 and V3 transmitting sensitive data unencrypted

The affected devices transmit sensitive information unencrypted allowing a remote unauthenticated attacker to capture and modify network traffic...

PT-2023-26827 · Senec +1 · Storage Box V1 +3

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue allows a remote unauthenticated attacker to capture and modify network traffic because sensitive information is transmitted unencrypted. Recommendations: At the moment, there is ...

EnBw SENEC Legacy Storage Box Security Vulnerability

The EnBw SENEC Legacy Storage Box is a series of storage boxes from German company EnBw. A security vulnerability exists in EnBw SENEC Legacy Storage Box versions V1, V2, and V3, which stems from the affected devices transmitting unencrypted sensitive information, and can be exploited by an...

PT-2023-19637 · WordPress +1 · Userpro

The UserPro plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 5.1.1. This is due to the plugin using native password reset functionality, with insufficient validation on the password reset function userpro process form. The function uses the...

The vulnerability of the Nautobot network infrastructure management software lies in the unencrypted storage of credentials, allowing attackers to influence the confidentiality of this information.

The vulnerability of the Nautobot network infrastructure management software is related to the unencrypted storage of credentials. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality of information...

Nothing Chats pulled from Google Play

Sometimes it’s all in the name. The Nothing Chats beta has been pulled from the Google Play Store after reports that the company behind it has access to your unencrypted messages. Nothing Phone 2 owners were promised a first-of-its-kind app developed in partnership with Sunbird, which allowed the...

The vulnerability of the param.file.tgz file of the Backup Handler component in the Netis Netcore microprogramming system allows a hacker to disclose protected information.

The vulnerability of the param.file.tgz file of the Backup Handler component in the Netis Netcore microprogramming system lies in the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to disclose the protected information...

The vulnerability of the software for designing, operating, and maintaining COMOS technological installations lies in the transfer of accounting data in unencrypted form, allowing a perpetrator to gain access to configuration data.

The vulnerability of COMOS’ software for the design, operation, and maintenance of technological installations lies in the transfer of accounting data in an unencrypted form. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to configuration data...

PT-2023-6874 · Comos · Comos

Name of the Vulnerable Software and Affected Versions: COMOS versions prior to V10.4.4 Description: The issue is related to the transmission of credentials in unencrypted form, potentially allowing a remote attacker to access configuration data. The caching system in the affected application leak...

The vulnerability of the KeePass password manager, related to the unencrypted storage of critical information, allows attackers to obtain passwords in an open form.

The vulnerability of the KeePass password manager is related to the unencrypted storage of critical information. Exploiting this vulnerability can allow an attacker to obtain passwords in their raw form...

The vulnerability of the SCADA system PcVue, related to unencrypted storage of account data, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the SCADA system PcVue is related to the unencrypted storage of account data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

Huawei HarmonyOS and EMUI Information Disclosure Vulnerability (CNVD-2023-88962)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. Huawei HarmonyOS and EMUI have an information disclosu...

Huawei HarmonyOS 信息泄露漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. Huawei HarmonyOS and EMUI have an information disclosu...

The vulnerability of the EisBaer SCADA system, related to the storage of passwords in an unencrypted form, allows a intruder to expose the protected information and compromise the system.

The vulnerability of the EisBaer SCADA system is related to the storage of passwords in an unencrypted form. Exploiting this vulnerability can allow a perpetrator to disclose protected information and compromise the system...

The vulnerability of the Zoom video conferencing service, related to the unencrypted storage of critical information, allows attackers to gain access to protected data.

The vulnerability of the Zoom video conferencing service is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to gain access to protected data...

The vulnerability of the mstlsapi.dll library in the Remote Desktop Services (RDS) operating system allows a hacker to execute a type of attack known as “man-in-the-middle” attack.

The vulnerability of the mstlsapi.dll library in the Remote Desktop Services RDS operating system of Windows involves unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to carry out a “man-in-the-middle” attack...

PT-2023-27782 · Silicon · Silicon Labs Ember Znet Sdk

Name of the Vulnerable Software and Affected Versions: Silicon Labs Ember ZNet SDK versions 7.3.1 and earlier Description: The issue allows potential modification or extraction of network credentials stored in flash due to missing encryption of security keys in the Silicon Labs Ember ZNet SDK on...

CVE-2023-45321

The Android Client application, when enrolled with the define method 1 the user manually inserts the server ip address, use HTTP protocol to retrieve sensitive information ip address and credentials to connect to a remote MQTT broker entity instead of HTTPS and this feature is not configurable by...

The vulnerability of the Kafka platform’s message and section management package for security organization, automation, and Cortex XSOAR responses lies in the unencrypted storage of key certificates, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Kafka platform’s message and section management package for security organization, automation, and Cortex XSOAR response is related to the unencrypted storage of key certificates. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to...