4 results · Clear filters · Feed
-
Medium 4.1
Improper Access Control in EFACEC UC 500E
A user without administrator permissions with access to the UC500 windows system could perform a memory dump of the running processes and extract clear credentials or valid session tokens.
-
Medium 5.3
Exposure of Sensitive Information to an Unauthorized Actor in EFACEC UC 500E
An attacker could create malicious requests to obtain sensitive information about the web server.
-
Medium 4.3
URL Redirection to Untrusted Site ('Open Redirect') in EFACEC UC 500E
An attacker could construct a URL within the application that causes a redirection to an arbitrary external domain and could be leveraged to facilitate phishing attacks against application users.
-
Medium 6.3
Cleartext Transmission of Sensitive Information in EFACEC UC 500E
An attacker with network access could perform a man-in-the-middle (MitM) attack and capture sensitive information to gain unauthorized access to the application.