CVE-2023-5461CWE-319

Delta Electronics WPLSoft Modbus cleartext transmission

Low · published October 9, 2023

CVSS v3.1
3.7
EPSS
0%
Percentile
41.2
In the wild
Unconfirmed
What it is

A vulnerability was found in Delta Electronics WPLSoft 2.51. It has been classified as problematic. Affected is an unknown function of the component Modbus Handler. The manipulation leads to cleartext transmission of sensitive information. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-241584. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00490 · 41.2th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2023-10-09T20:00Z
EPSS history
Timeline
  • 09 OCT 20:00Z
    Delta Electronics WPLSoft Modbus cleartext transmission
    cvelistv5