Description
The Campbell Scientific CSI Web Server stores web authentication credentials in a file with a specific file name. Passwords within that file are stored in a weakly encoded format. There is no known way to remotely access the file unless it has been manually renamed. However, if an attacker were to gain access to the file, passwords could be decoded and reused to gain access.
INFO
Published Date :
2024-05-28T18:43:07.150Z
Last Modified :
2024-08-01T21:11:12.752Z
Source :
icscert
AFFECTED PRODUCTS
The following products are affected by CVE-2024-5434 vulnerability.
| Vendors | Products |
|---|---|
| Campbellsci |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2024-5434.
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability