CVE Vulnerabilities

CVE-2020-18759

Cleartext Storage of Sensitive Information

Published: Aug 13, 2021 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

An information disclosure vulnerability exists in the EPA protocol of Dut Computer Control Engineering Co.s PLC MAC1100.

Weakness

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

Affected Software

NameVendorStart VersionEnd Version
Mac1100_plc_firmwareDcce- (including)- (including)

Potential Mitigations

References