9.3

CVE-2015-7908

Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allow remote attackers to discover cleartext passwords by sniffing the network.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Honeywell ≫ Midas Firmware Version <= 1.13b1
   Honeywell ≫ Midas Version -
Honeywell ≫ Midas Black Firmware Version <= 2.13b1
   Honeywell ≫ Midas Black Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.01% 0.783
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://ics-cert.us-cert.gov/advisories/ICSA-15-309-02
Third Party Advisory
US Government Resource