CVE Vulnerabilities

CVE-2023-25437

Cleartext Transmission of Sensitive Information

Published: Apr 27, 2023 | Modified: Jan 31, 2025
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An issue was discovered in vTech VCS754 version 1.1.1.A before 1.1.1.H, allows attackers to gain escalated privileges and gain sensitive information due to cleartext passwords passed in the raw HTML.

Weakness

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

Affected Software

Name Vendor Start Version End Version
Vcs754a_firmware Vtech 1.1.1.a (including) 1.1.1.h (excluding)

Potential Mitigations

References