CVE-2024-0556

CVSS v3 Score
6.5
Medium

Vulnerability Description

A Weak Cryptography for Passwords vulnerability has been detected on WIC200 affecting version 1.1. This vulnerability allows a remote user to intercept the traffic and retrieve the credentials from another user and decode it in base64 allowing the attacker to see the credentials in plain text.

CVSS:6.5(Medium)

Weak encoding for password vulnerability exists in HMI ViewJet C-more series. If this vulnerability is exploited, authentication information may be obtained by a local authenticated attacker.

CVSS:6.6(Medium)

Eaton easyE4 PLC offers a device password protection functionality to facilitate a secure connection and prevent unauthorized access. It was observed that the device password was stored with a weak en...

CVSS:5.9(Medium)

This vulnerability allows remote attackers to disclose sensitive information on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to ex...

CVSS:5.9(Medium)

The swctrl service is used to detect and remotely manage PLANET Technology devices. For certain switch models, the authentication tokens used during communication with this service are encoded user pa...

CVSS:5.7(Medium)

A weak encoding is used to transmit credentials for WS203VICM.

CVSS:5.7(Medium)

Advantech ADAM-5630 shares user credentials plain text between the device and the user source device during the login process.