Skip to content
OpenAdvisories

Weakness (CWE)

CWE-317: Cleartext Storage of Sensitive Information in GUI

Variant Draft

The product stores sensitive information in cleartext within the GUI.

Source: MITRE CWE-317

All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Critical 9.3
    CVE-2025-14816

    Information Disclosure, Tampering, and Denial-of-Service Vulnerabilities in GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, GENESIS, and MC Works64

    Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Ele…

    Mitsubishi Electric Mitsubishi Electric Iconics Digital Solutions MC Works64 ICONICS Suite ICS / OT
  • High 7.5
    CVE-2026-27516

    Binardat 10G08-0800GSM Network Switch Plaintext Password Exposure

    Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior expose user passwords in plaintext within the administrative interface and HTTP responses, allowing recovery of valid credentials.

    Binardat 10G08-0800GSM Network Switch
  • High 7.1
    CVE-2026-24431

    Tenda W30E V2 Web UI Reveals Passwords in Cleartext

    Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) display stored user account passwords in plaintext within the administrative web interface. Any user with access to the affected management pages can directly view credentials.

    Shenzhen Tenda Technology W30E V2
  • Medium 4.3
    CVE-2021-34751

    Cisco Firepower Management Center Software Configuration Information Disclosure Vulnerability

    A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to access sensitive configuration information. The attacker would require low privilege…

    Cisco Cisco Firepower Management Center Network devices
  • Medium 4.3
    CVE-2021-34750

    Cisco Firepower Management Center Software Configuration Information Disclosure Vulnerability

    A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center Software could allow an authenticated, remote attacker to access sensitive configuration information. The attacker would require low privilege crede…

    Cisco Cisco Firepower Management Center Network devices
  • High 8.5
    CVE-2022-29090

    Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability. A low privileged malicious…

    Dell Wyse Management Suite
  • High 7.3
    CVE-2022-0354

    A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the a…

    Lenovo System Update
  • Medium 4.9
    CVE-2019-13947

    A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The user configuration menu…

    Siemens Control Center Server (CCS) ICS / OT