CVE-2024-7755

HMS Networks EWON FLEXY 202 Insufficiently Protected Credentials PUBLISHED

Description (CNA)

The EWON FLEXY 202 transmits credentials using a weak encoding method base64. An attacker who is present in the network can sniff the traffic and decode the credentials.

Affected (CNA)

Vendor / product	Versions
HMS Networks / EWON FLEXY 202	affected 14.2s0

CWE

CWE-522

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-291-04

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.