CVE-2021-3252

KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control

published February 23, 2021

CVSS
—
EPSS
3%
Percentile
85.1
In the wild
Unconfirmed
What it is

KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control. Credentials will always be returned in plain-text from the local server during the KACO XP100U authentication process, regardless of whatever passwords have been provided, which leads to an information disclosure vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02588 · 85.1th percentile
Published
2021-02-23T14:15Z
EPSS history
Timeline
  • 23 FEB 14:15Z
    KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control
    cvelistv5