In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be captured by an attacker who gains control over the users computer. Therefore the user must have logged in at least once.
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wha-gw-f2d2-0-as-z2-eth_firmware | Pepperl-fuchs | * | 3.0.9 (including) |