An issue in the SMTP Email Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to credentials in plaintext via a passback attack. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
References
Configurations
No configuration.
History
21 Nov 2024, 09:17
Type | Values Removed | Values Added |
---|---|---|
References | () https://avtech.com/articles/27443/security-advisory-smtp-password-disclosure-in-dom/ - |
31 Oct 2024, 18:35
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.9 |
CWE | CWE-312 |
24 May 2024, 18:09
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-05-24 15:15
Updated : 2024-11-21 09:17
NVD link : CVE-2024-33470
Mitre link : CVE-2024-33470
CVE.ORG link : CVE-2024-33470
JSON object : View
Products Affected
No product.
CWE
CWE-312
Cleartext Storage of Sensitive Information