CVE-2017-5146
HighSummary
An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17, related to the storage of sensitive information in clear-text.
Risk Assessment
Storing sensitive data in clear-text may lead to unauthorized disclosure, posing a significant security risk to the organization.
Recommendation
It is recommended to update the firmware to the latest version to secure stored information against unauthorized access.
Other vulnerabilities in Carlo Gavazzi VMU-C EM, Carlo Gavazzi VMU-C PV
See all- CVE-2017-5145Critical
An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. Successful exploitation of this CROSS-SITE REQUEST FORGERY (CSRF) vulnerability can allow execution of unauthorized actions on the device such as configuration parameter changes, and saving modified configuration.
- CVE-2017-5144Critical
An access control flaw was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05 and VMU-C PV prior to firmware Version A17, allowing access to most application functions without authentication.
Original NVD description (English source)
An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. Sensitive information is stored in clear-text.