CVE-2014-9199 — Clorius Controls A/S ISC SCADA Insecure Java Client Inadequate Encryption Strength

CVE-2014-9199

Clorius Controls A/S ISC SCADA Insecure Java Client Inadequate Encryption Strength PUBLISHED

Description (CNA)

The Clorius Controls Java web client before 01.00.0009g allows remote attackers to discover credentials by sniffing the network for cleartext-equivalent traffic.

Affected (CNA)

Vendor / product	Versions
Clorius Controls / A/S Java web client	affected 0 through 01.00.0009b

CWE

CWE-326

References

https://www.cisa.gov/news-events/ics-advisories/icsa-15-013-02
http://www.cloriuscontrols.com

ADP enrichment

CVE

No English description supplied.

https://ics-cert.us-cert.gov/advisories/ICSA-15-013-02