Description
Kieback & Peter's DDC4000 series has an insufficiently protected credentials vulnerability, which may allow an unauthenticated attacker with access to /etc/passwd to read the password hashes of all users on the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kieback&Peter | DDC4040e | ≤ 1.17.6 | — |
| Kieback&Peter | DDC4020e | ≤ 1.17.6 | — |
| Kieback&Peter | DDC4400e | ≤ 1.17.6 | — |
| Kieback&Peter | DDC4200e | ≤ 1.17.6 | — |
| Kieback&Peter | DDC4002e | ≤ 1.17.6 | — |
| Kieback&Peter | DDC4400 | ≤ 1.12.14 | — |
| Kieback&Peter | DDC4200-L | ≤ 1.12.14 | — |
| Kieback&Peter | DDC4200 | ≤ 1.12.14 | — |
| Kieback&Peter | DDC4100 | ≤ 1.7.4 | — |
| Kieback&Peter | DDC4002 | ≤ 1.12.14 | — |
Advisories 1
- ICSA-24-291-05 Kieback&Peter DDC4000 Series CISA ICS & IT advisories · Oct 17, 2024