CVE-2021-40366CWE-311

A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.42), Climatix POL909 (AWM module) (All versions < V11.34)

published November 9, 2021

CVSS
—
EPSS
0%
Percentile
35.4
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.42), Climatix POL909 (AWM module) (All versions < V11.34). The web server of affected devices transmits data without TLS encryption. This could allow an unauthenticated remote attacker in a man-in-the-middle position to read sensitive data, such as administrator credentials, or modify data in transit.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00421 · 35.4th percentile
Weakness
CWE-311 · Missing Encryption of Sensitive Data
Published
2021-11-09T11:32Z
EPSS history
Timeline
  • 09 NOV 11:32Z
    A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.42), Climatix POL909 (AWM module) (All versions < V11.34)
    cvelistv5