Description (CNA)
Kieback & Peter's DDC4000 series has an insufficiently protected credentials vulnerability, which may allow an unauthenticated attacker with access to /etc/passwd to read the password hashes of all users on the system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Kieback&Peter / DDC4040e | affected 0 through 1.17.6 |
| Kieback&Peter / DDC4020e | affected 0 through 1.17.6 |
| Kieback&Peter / DDC4400e | affected 0 through 1.17.6 |
| Kieback&Peter / DDC4200e | affected 0 through 1.17.6 |
| Kieback&Peter / DDC4002e | affected 0 through 1.17.6 |
| Kieback&Peter / DDC4400 | affected 0 through 1.12.14 |
| Kieback&Peter / DDC4200-L | affected 0 through 1.12.14 |
| Kieback&Peter / DDC4200 | affected 0 through 1.12.14 |
| Kieback&Peter / DDC4100 | affected 0 through 1.7.4 |
| Kieback&Peter / DDC4002 | affected 0 through 1.12.14 |
CWE
CWE-522
References
ADP enrichment
No English description supplied.
No references supplied.