CVE-2021-42699CWE-319

AzeoTech DAQFactory

Medium · published November 5, 2021

CVSS v3.1
5.7
EPSS
1%
Percentile
42.7
In the wild
Unconfirmed
What it is

The affected product is vulnerable to cookie information being transmitted as cleartext over HTTP. An attacker can capture network traffic, obtain the user’s cookie and take over the account.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00511 · 42.7th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2021-11-05T15:39Z
EPSS history
Timeline
  • 05 NOV 15:39Z
    AzeoTech DAQFactory
    cvelistv5