CVE-2020-10605

Grundfos CIM 500 before v06.16.00 responds to unauthenticated requests for password storage files...

CVE-2020-10605

CVE-2020-10605 affects Grundfos CIM 500 (all versions prior to v06.16.00). The root cause is missing authentication for a critical function that allows unauthenticated access to password storage files, effectively exposing plaintext credentials. Impact, as documented, includes unauthorized access...

Grundfos CIM 500

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Grundfos Pumps Corporation Equipment: CIM 500 Vulnerabilities: Missing Authentication for Critical Function, Unprotected Storage of Credentials 2. RISK EVALUATION Successful exploitation of these...