Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a configuration file containing a cleartext password. NOTE: this is a serial-to-Ethernet converter that should not be placed at the edge of the network.
Metrics
Affected Vendors & Products
References
History
Mon, 26 Aug 2024 15:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Weaknesses | CWE-256 CWE-522 |
MITRE
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-26T14:09:47.994Z
Reserved:
Link: CVE-2024-36081
Vulnrichment
Updated: 2024-08-02T03:30:12.820Z
NVD
Status : Awaiting Analysis
Published: 2024-05-19T20:15:08.287
Modified: 2024-11-21T09:21:36.423
Link: CVE-2024-36081
Redhat
No data.