high8.8Public exploit code
CVE-2019-11369
An issue was discovered in Carel pCOWeb prior to B1.2.4.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Carel pCOWeb < B1.2.1 - Credentials Disclosure2019-05-22 · webapps · hardware
Impact
An issue was discovered in Carel pCOWeb prior to B1.2.4. In /config/pw_changeusers.html the device stores cleartext passwords, which may allow sensitive information to be read by someone with access to the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Carel | Pcoweb Card Firmware | before b1.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2019/Oct/45
- https://drive.google.com/open?id=12Sq6oaxe1mC1y71Emo1YladjDjwTdNfb
- https://github.com/nepenthe0320/cve_poc/blob/master/CVE-2019-11369
- http://seclists.org/fulldisclosure/2019/Oct/45
- https://drive.google.com/open?id=12Sq6oaxe1mC1y71Emo1YladjDjwTdNfb
- https://github.com/nepenthe0320/cve_poc/blob/master/CVE-2019-11369