CVE-2019-17218

The CVE-2019-17218 entry concerns V-Zug Combi-Steam MSLQ devices prior to Ethernet R07 and WLAN R05, where web service communications occur over unencrypted HTTP by default. This configuration enables an attacker to intercept and sniff traffic between the device and the web service, exposing pote...

CVE-2019-17219

CVE-2019-17219 concerns V‑Zug Combi‑Steam MSLQ devices. The issue arises from an authentication deficiency on the device before Ethernet R07 and WLAN R05, allowing an adjacent attacker to use the network interface without proper access control. Affected firmware versions lack sufficient authentic...

CVE-2019-17219

An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. By default, the device does not enforce any authentication. An adjacent attacker is able to use the network interface without proper access control...