Title: Safety Vision RouteRecorder 4C set Command Cleartext Service Passwords Local Disclosure
Info
Disclosure
May 03, 2011
Discovery
Unknown
Dates
Exploit
May 03, 2011
Solution
Unknown
Description
Safety Vision RouteRecorder 4C contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when an attacker submits a blank SET command to the device, which will disclose service passwords in cleartext to a remote attacker.
Classification
Location:
Local Access Required
Attack Type:
Cryptographic,
Information Disclosure
Impact:
Loss of Confidentiality
Solution:
Solution Unknown
Exploit:
Exploit Public
Disclosure:
Uncoordinated Disclosure
OSVDB:
Authentication Required
Solution
OSVDB is not aware of a solution for this vulnerability.