CVE-2024-31200 — Plug&Track / Sensor Net Connect V2

CVE-2024-31200

Plug&Track / Sensor Net Connect V2 PUBLISHED

Description (CNA)

A “CWE-201: Insertion of Sensitive Information Into Sent Data” affecting the administrative account allows an attacker with physical access to the machine to retrieve the password in cleartext when an administrative session is open in the browser.

Affected (CNA)

Vendor / product	Versions
Plug&Track / Sensor Net Connect V2	affected 2.24

CWE

CWE-201

References

https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31200

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.