Insufficiently Protected Credentials in LOYTEC LVIS-3ME Products
CVE-2017-13998

7.5HIGH

Key Information:

Vendor

Loytec

Status
Loytec Lvis-3me
Vendor
CVE Published:
5 October 2017

What is CVE-2017-13998?

An insufficiently protected credentials issue was identified in LOYTEC LVIS-3ME versions prior to 6.2.0. This vulnerability exposes sensitive information to unauthorized access due to inadequate security measures, jeopardizing user data and overall system integrity. Ensuring timely updates to the affected versions is critical for maintaining data security.

Affected Version(s)

LOYTEC LVIS-3ME LOYTEC LVIS-3ME

References

https://ics-cert.us-cert.gov/advisories/ICSA-17-257-01
x_refsource_MISC
http://www.securityfocus.com/bid/100847
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.