Description
An authenticated malicious user could acquire the simple mail transfer protocol (SMTP) Password in cleartext format, despite it being protected and hidden behind asterisks. The attacker could then perform further attacks using the SMTP credentials.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAUTER | EY-AS525F001 with moduWeb | all versions | — |
Advisories 1
- ICSA-23-082-03 SAUTER EY-modulo 5 Building Automation Stations CISA ICS & IT advisories · Apr 3, 2023