CVE-2026-55985CWE-312

CVE-2026-55985

Medium · published July 25, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
8.7
In the wild
Unconfirmed
What it is

The web management interface in Tycon Systems TPDIN-Monitor-WEB2

stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read these credentials, which may be used to compromise other systems on the local network.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00195 · 8.7th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2026-07-25T02:16Z
References (2)
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-202-01.json · [email protected]https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-01 · [email protected]
EPSS history
Timeline
  • 24 JUL 21:37Z
    Tycon Systems TPDIN-Monitor-WEB2 Cleartext Storage of Sensitive Information
    cvelistv5