CVEvulnerability

CVE-2017-17691

8.1 HIGH Published 2018-09-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-09-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.1 HIGH — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-522

Description

Homeputer CL Studio fur HomeMatic 4.0 Rel 160808 and earlier uses cleartext to exchange the username and password between server and client instances, which allows remote attackers to obtain sensitive information via a man in the middle attack.

Affected configurations

• contronics homeputer cl studio fur homematic (< 4.0)

Related

Weakness · CWE (1)

  • CWE-522 Insufficiently Protected Credentials weakness

References