Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cleartext Transmission of Sensitive Information in EFACEC UC 500E
Vulnerability Description
An attacker with network access could perform a man-in-the-middle (MitM) attack and capture sensitive information to gain unauthorized access to the application.
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
Vulnerability Type
敏感数据的明文传输
Vulnerability Title
EFACEC UC 500 安全漏洞
Vulnerability Description
EFACEC UC 500是葡萄牙EFACEC公司的一种解决方案，为公用事业和工业应用提供一体化的灵活通信网关、自动化平台和 HMI 解决方案。 EFACEC UC 500 存在安全漏洞，该漏洞源于具有网络访问权限的攻击者可以执行中间人攻击并捕获敏感信息，以获得对应用程序的未经授权的访问。
CVSS Information
N/A
Vulnerability Type
N/A