Cleartext Password Exposure in Eaton UPS 9PX 8000 SP Devices

CVE-2018-9279

Summary

Eaton UPS 9PX 8000 SP devices contain a significant security flaw where user passwords are revealed in cleartext through the web interface. This vulnerability arises because the source code of the displayed webpage leaks sensitive information, allowing unauthorized individuals to retrieve passwords easily by viewing the page's source. As a result, users are at risk of unauthorized access and potential exploitation, highlighting the urgent need for security enhancements to protect user credentials.

References