Cleartext Transmission Vulnerability in Socomec DIRIS Digiware M-70

CVE-2024-48894

What is CVE-2024-48894?

A vulnerability in the WEBVIEW-M functionality of the Socomec DIRIS Digiware M-70 version 1.6.9 allows for cleartext data transmission, which may expose sensitive information. An attacker with access to network traffic can exploit this vulnerability through specially crafted HTTP requests, leading to the potential disclosure of confidential data. Organizations using this device should take immediate precautions to mitigate risks and ensure data security.

References