CVE-2024-33470

An issue in the SMTP Email Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to credentials in plaintext via a passback attack. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2024-33470

The AVTECH Room Alert 4E v4.4.0 environmental monitoring device is vulnerable to a passback attack within its SMTP Email Settings . When an administrator authenticates and browses settings pages, the SMTP password is loaded and displayed in the DOM in plaintext . Additionally, credentials are sen...