CVE-2026-25608CWE-319
Lack of traffic encryption in STER
Low · published May 22, 2026
What it is
STER uses unencrypted TCP traffic to transmit data over the network. It allows an attacker to conduct a Man-In-The-Middle attack and obtain sensitive data such as passwords, personal data, or authentication tokens.
This issue was fixed in version 9.5.
The record
Technical detail
- CVSS v4.0
- 2.3 · LOW
- Vector
- CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
- EPSS
- 0.00330 · 24.9th percentile
- Weakness
- CWE-319 · Cleartext Transmission of Sensitive Information
- Published
- 2026-05-22T09:14Z
EPSS history
Timeline