Cleartext Credentials Exposure in Tycon Systems TPDIN-Monitor-WEB2
CVE-2026-55985

5.3MEDIUM

Key Information:

Vendor

Tycon Systems

Status
Tpdin-monitor-web2
Vendor
CVE Published:
24 July 2026

What is CVE-2026-55985?

The web management interface of Tycon Systems TPDIN-Monitor-WEB2 reveals sensitive system credentials in cleartext on a specific configuration page. This exposure is accessible to authenticated users who have access to the administrative dashboard, allowing any of these users to read the credentials directly. Such access can lead to unauthorized actions, making it crucial for users to secure their configurations to prevent potential compromises of other systems within the local network.

Affected Version(s)

TPDIN-Monitor-WEB2 2.3.9

References

https://www.tyconsystems.com/contact
https://www.cisa.gov/news-events/ics-advisories/icsa-26-2...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Abdiwelli Guled reported this vulnerability to CISA.
.