Cleartext Storage of Sensitive Information
CVE-2022-30626
Summary
Browsing the path: http://ip/wifi_ap_pata_get.cmd, will show in the name of the existing access point on the component, and a password in clear text.
- LOW
- LOCAL
- LOW
- CHANGED
- NONE
- LOW
- LOW
- LOW
CWE-312 - Cleartext Storage of Sensitive Information
The application stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
References
Advisory Timeline
- Published