CVE-2023-0356CWE-261

SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on HTTP connections, which could result in threat actors obtaining…

Medium · published January 24, 2023

CVSS v3.1
5.7
EPSS
0%
Percentile
39.8
In the wild
Unconfirmed
What it is

SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on HTTP connections, which could result in threat actors obtaining sensitive information.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00471 · 39.8th percentile
Weakness
CWE-261 · Weak Encoding for Password
Published
2023-01-24T18:40Z
EPSS history
Timeline
  • 24 JAN 18:40Z
    SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on HTTP connections, which could result in threat actors obtaining…
    cvelistv5