Mitsubishi (CVE-2022-33321)

Cleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP connections in Mitsubishi Electric consumer electronics products PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE, HEMS adapter, Wi-Fi Interface, Air Conditioning, Induction hob, Mitsubishi Electric...

PT-2025-18707 · Tenda · Tenda Rx2 Pro

Name of the Vulnerable Software and Affected Versions: Tenda RX2 Pro version 16.03.30.14 Description: The issue concerns the cleartext transmission of sensitive information in the web management portal, allowing an attacker to decrypt traffic between the client and server by collecting the...

CVE-2025-46633

Cleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an attacker to decrypt traffic between the client and server by collecting the symmetric AES key from collected and/or observed traffic. The AES key in sent in cleartext in respons...

CVE-2025-46633

CVE-2025-46633 affects the Tenda RX2 Pro web management portal (version 16.03.30.14). The root cause is the cleartext transmission of the symmetric AES key in responses after successful authentication, with a fixed IV (EU5H62G9ICGRNI43). This enables an attacker with network access to decrypt tra...

CVE-2025-46634

The CVE-2025-46634 issue affects the Tenda RX2 Pro web management portal (firmware 16.03.30.14). The underlying problem is that the portal transmits the user’s password hash in cleartext before encryption is established, allowing an unauthenticated attacker to observe credentials and replay the h...

CVE-2025-3395

Incorrect Permission Assignment for Critical Resource, Cleartext Storage of Sensitive Information vulnerability in ABB Automation Builder.This issue affects Automation Builder: through 2.8.0...

CVE-2025-3395

Incorrect Permission Assignment for Critical Resource, Cleartext Storage of Sensitive Information vulnerability in ABB Automation Builder.This issue affects Automation Builder: through 2.8.0...

CVE-2025-3395

Incorrect Permission Assignment for Critical Resource, Cleartext Storage of Sensitive Information vulnerability in ABB Automation Builder.This issue affects Automation Builder: through 2.8.0...

CVE-2025-3395

ABB Automation Builder contains a vulnerability (CVE-2025-3395) due to incorrect permission assignment for a critical resource and cleartext storage of sensitive information in project files. Affected product: Automation Builder up to version 2.8.0. Impact noted in CISA ICS advisory as the abilit...

CVE-2025-2770

BEC Technologies Multiple Routers Cleartext Password Storage Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BEC Technologies routers. Authentication is required to exploit this vulnerability. The...

Security Bulletin: IBM InfoSphere DataStage Flow Designer is vulnerable due to cleartext transmission of sensitive information (CVE-2025-25046)

Summary A sensitive information disclosure vulnerability in IBM InfoSphere DataStage Flow Designer was addressed. Vulnerability Details CVEID:CVE-2025-25046 DESCRIPTION: IBM InfoSphere DataStage Flow Designer transmits sensitive information via URL or query parameters that could be exposed to an...

CVE-2025-2770

BEC Technologies Multiple Routers Cleartext Password Storage Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BEC Technologies routers. Authentication is required to exploit this vulnerability. The...

CVE-2025-2770 BEC Technologies Multiple Routers Cleartext Password Storage Information Disclosure Vulnerability

BEC Technologies Multiple Routers Cleartext Password Storage Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BEC Technologies routers. Authentication is required to exploit this vulnerability. The...

CVE-2025-2770 BEC Technologies Multiple Routers Cleartext Password Storage Information Disclosure Vulnerability

BEC Technologies Multiple Routers Cleartext Password Storage Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BEC Technologies routers. Authentication is required to exploit this vulnerability. The...

CVE-2025-43704

Arctera/Veritas Data Insight before 7.1.2 can send cleartext credentials when configured to use HTTP Basic Authentication to a Dell Isilon OneFS server...

CVE-2025-43704

Arctera/Veritas Data Insight before 7.1.2 can send cleartext credentials when configured to use HTTP Basic Authentication to a Dell Isilon OneFS server...

CVE-2025-43704

Arctera/Veritas Data Insight before 7.1.2 can send cleartext credentials when configured to use HTTP Basic Authentication to a Dell Isilon OneFS server...

PT-2025-16923 · Veritas +1 · Arctera/Veritas Data Insight +1

Name of the Vulnerable Software and Affected Versions: Arctera/Veritas Data Insight versions prior to 7.1.2 Description: The issue concerns the transmission of cleartext credentials when Arctera/Veritas Data Insight is configured to use HTTP Basic Authentication to a Dell Isilon OneFS server...

CVE-2025-43704

CVE-2025-43704 affects Arctera/Veritas Data Insight prior to 7.1.2. The issue allows sending cleartext credentials when the product is configured to use HTTP Basic Authentication to a Dell Isilon OneFS server. The reported remediation is to upgrade to version 7.1.2 or later. Exploit details or ac...

Security Bulletin: Security Vulnerabilities reported against IBM Verify Identity Access and IBM Security Verify Access

Summary Multiple Security Vulnerabilities were adressed in IBM Verify Identity Access and IBM Security Verify Access. Vulnerability Details CVEID:CVE-2024-45659 DESCRIPTION: IBM Security Verify Access Appliance could allow a remote attacker to obtain sensitive information when a detailed technica...