The web interface for American Power Conversion (APC) PowerChute Network Shutdown performs all communication in cleartext (base64-encoded), which allows remote attackers to sniff authentication credentials.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Powerchute_network_shutdown | Apc | * | * |