PT-2025-4044 · Intelbras · Intelbras Incontrol

Name of the Vulnerable Software and Affected Versions: Intelbras InControl versions through 2.21.58 Description: A vulnerability exists in Intelbras InControl that is classified as problematic. The issue affects unknown code within the /v1/usuario/ file of the Registered User Handler component,...

CVE-2024-28786 IBM QRadar SIEM information disclosure

IBM QRadar SIEM 7.5 transmits sensitive or security-critical data in cleartext in a communication channel that could be obtained by an unauthorized actor using man in the middle techniques...

CVE-2024-28786

CVE-2024-28786 affects IBM QRadar SIEM 7.5 where sensitive data is transmitted in cleartext in a communication channel, enabling potential disclosure via man-in-the-middle. The CVSS v3.1 base score is 6.5 (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). Remediation in the provided data: upgrade QRadar SIEM...

CVE-2025-24389

CVE-2025-24389 affects OTRS and related builds (OTRS 7.0.X, 8.0.X, 2023.X, 2024.X and ((OTRS)) Community Edition 6.0.x; products based on CE are likely affected). The root cause is described as certain errors in upstream libraries that cause sensitive information to be written to the OTRS log mec...

Elspec G5 Digital Fault Recorder Cleartext Storage of Sensitive Information (CVE-2024-22084)

An issue was discovered in Elspec G5 digital fault recorder. Cleartext passwords and hashes are exposed through log files This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc';...

CVE-2024-12079

ECOVACS robot lawnmowers store the anti-theft PIN in cleartext on the device filesystem. An attacker can steal a lawnmower, read the PIN, and reset the anti-theft mechanism...

CVE-2024-12079 ECOVACS lawnmowers cleartext storage of anti-theft PIN

ECOVACS robot lawnmowers store the anti-theft PIN in cleartext on the device filesystem. An attacker can steal a lawnmower, read the PIN, and reset the anti-theft mechanism...

CVE-2024-12079 ECOVACS lawnmowers cleartext storage of anti-theft PIN

ECOVACS robot lawnmowers store the anti-theft PIN in cleartext on the device filesystem. An attacker can steal a lawnmower, read the PIN, and reset the anti-theft mechanism...

CVE-2024-12079

ECOVACS robot lawnmowers are affected by CVE-2024-12079 due to storing the anti-theft PIN in cleartext on the device filesystem. This allows a local attacker to read the PIN and reset the anti-theft mechanism, enabling theft or circumvention of anti-theft protections. The available sources confir...

PT-2025-1745 · Ecovacs · Ecovacs Robot Lawnmowers

Name of the Vulnerable Software and Affected Versions: ECOVACS robot lawnmowers affected versions not specified Description: The issue concerns the storage of the anti-theft PIN in cleartext on the device filesystem. This allows an attacker to steal a lawnmower, read the PIN, and reset the...

CVE-2024-26155 ETIC Telecom Remote Access Server (RAS) Cleartext Transmission of Sensitive Information

All versions of ETIC Telecom Remote Access Server RAS prior to 4.5.0 expose clear text credentials in the web portal. An attacker can access the ETIC RAS web portal and view the HTML code, which is configured to be hidden, thus allowing a connection to the ETIC RAS ssh server, which could enable ...

CVE-2024-48121

The HI-SCAN 6040i Hitrax HX-03-19-I was discovered to transmit user credentials in cleartext over the GIOP protocol. This allows attackers to possibly gain access to sensitive information via a man-in-the-middle attack...

CVE-2024-48121

The HI-SCAN 6040i Hitrax HX-03-19-I was discovered to transmit user credentials in cleartext over the GIOP protocol. This allows attackers to possibly gain access to sensitive information via a man-in-the-middle attack...

CVE-2024-48121

The CVE-2024-48121 entry concerns the Smiths Detection HI-SCAN 6040i Hitrax HX-03-19-I. Affected component: the HI-SCAN 6040i system; issue: credentials are transmitted in cleartext over the GIOP protocol, enabling potential man-in-the-middle access to sensitive information. Impact is described a...

CVE-2024-48121

The HI-SCAN 6040i Hitrax HX-03-19-I was discovered to transmit user credentials in cleartext over the GIOP protocol. This allows attackers to possibly gain access to sensitive information via a man-in-the-middle attack...

CVE-2024-42181

HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability. The application transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors...

CVE-2024-42181

HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability. The application transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors...

CVE-2024-42181 HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability

HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability. The application transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors...

CVE-2024-42181

CVE-2024-42181 impacts HCL MyXalytics (DRYiCE MyXalytics). The available data describe a cleartext transmission of sensitive information vulnerability where security‑critical data is sent in cleartext over a channel that can be sniffed. The public documents identify the affected product and the g...

CVE-2024-42181 HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability

HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability. The application transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors...