CVE-2023-6094CWE-319

OnCell G3150A-LTE Series: Web Server Transmits Cleartext Credentials

Medium · published December 31, 2023

CVSS v3.1
5.3
EPSS
0%
Percentile
14.3
In the wild
Unconfirmed
What it is

A vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior. The vulnerability results from lack of protection for sensitive information during transmission. An attacker eavesdropping on the traffic between the web browser and server may obtain sensitive information. This type of attack could be executed to gather sensitive information or to facilitate a subsequent attack against the target.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00240 · 14.3th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2023-12-31T09:57Z
EPSS history
Timeline
  • 31 DEC 09:57Z
    OnCell G3150A-LTE Series: Web Server Transmits Cleartext Credentials
    cvelistv5