Skip to content
OpenAdvisories
High ICSA-20-189-01 2 CVEs

Grundfos CIM 500

Published Jul 7, 2020 · Updated Jul 7, 2020

Vendor: Grundfos Pumps Product: CIM 500

Summary

Successful exploitation of these vulnerabilities could allow access to cleartext credential data.

Vulnerabilities 2

  • Unscored —
    CVE-2020-10605

    Grundfos CIM 500 before v06.16.00 responds to unauthenticated requests for password storage files.

    Grundfos CIM 500
  • Unscored —
    CVE-2020-10609

    Grundfos CIM 500 v06.16.00 stores plaintext credentials, which may allow sensitive information to be read or allow modi…

    Grundfos CIM 500

Revision history

  1. #1

    Publication Date

References