Pronetiqs IntraVUE vulnerabilities

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, bypassing OT segmentation.

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength vulnerability that could allow an attacker to steal admin credentials via weak hash or pass-the-hash attack.

Pronetiqs IntraVUE versions 3.2.1a14 and prior expose sensitive system information to unauthenticated users, allowing asset discovery.

Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability that could expose cleartext credentials through the API.

Pronetiqs IntraVUE versions 3.2.1a14 and prior expose sensitive system information to unauthorized entities, potentially revealing host/share files.