CVE-2023-22597

MEDIUM Year: 2023
CVSS v3 Score
5.9
Medium
Weakness Type
CWE-319
View all →

Vulnerability Description

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-319: Cleartext Transmission of Sensitive Information. They use an unsecured channel to communicate with the cloud platform by default. An unauthorized user could intercept this communication and steal sensitive information such as configuration information and MQTT credentials; this could allow MQTT command injection.

Related Vulnerabilities

CVE-2017-1232

MEDIUM
CVSS:5.9(Medium)

IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. IBM X-Fo...

CWE-3192017

CVE-2017-15042

MEDIUM
CVSS:5.9(Medium)

An unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1. RFC 4954 requires that, during SMTP, the PLAIN auth scheme must only be used on network connections secured with TLS. Th...

CWE-3192017

CVE-2017-2412

MEDIUM
CVSS:5.9(Medium)

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "iTunes Store" component. It allows man-in-the-middle attackers to modify the client-server data ...

CWE-3192017

CVE-2017-6341

MEDIUM
CVSS:5.9(Medium)

Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19 send cleartext passwords in response to r...

CWE-3192017

CVE-2017-8444

MEDIUM
CVSS:5.9(Medium)

The client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt traffic to ZooKeeper. If an attacker is able to man in the middle (MITM) the traffic between the client...

CWE-3192017

CVE-2017-8850

MEDIUM
CVSS:5.9(Medium)

An issue was discovered on OnePlus One, X, 2, 3, and 3T devices. Due to a lenient updater-script in the OnePlus OTA images, and the fact that both ROMs use the same OTA verification keys, attackers ca...

CWE-3192017