An issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the users password. The web page displayed by the appliance contains the password in cleartext. Passwords could be retrieved by browsing the source code of the webpage.
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| 9px_ups_firmware | Eaton | - (including) | - (including) |