medium5.9
CVE-2022-29733
Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and store sensitive information in cleartext.
Impact
Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and store sensitive information in cleartext. This vulnerability allows attackers to intercept HTTP Cookie authentication credentials via a man-in-the-middle attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Deltacontrols | Entelitouch Firmware | Versions 3.33.4005, 3.40.3706, 3.40.3935 |