HIGH🇵🇱 Wersja polska

CVE-2024-0556

CVSS 7.1v3.1pub. 2024-01-16upd. 2024-11-21

A Weak Cryptography for Passwords vulnerability has been detected on WIC200 affecting version 1.1. This vulnerability allows a remote user to intercept the traffic and retrieve the credentials from another user and decode it in base64 allowing the attacker to see the credentials in plain text.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

  • Xantech Wic1200

    HW
    Xantech
    all versions

  • Xantech Wic1200 Firmware

    OS
    Xantech
    1.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-0554MEDIUM5.5same product

A Cross-site scripting (XSS) vulnerability has been found on WIC1200, affecting version 1.1. An authenticated ...

CVE-2024-0555MEDIUM4.6same product

A Cross-Site Request Forgery (CSRF) vulnerability has been found on WIC1200, affecting version 1.1. An authent...