Description
The EWON FLEXY 202 transmits credentials using a weak encoding method base64. An attacker who is present in the network can sniff the traffic and decode the credentials.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HMS Networks | EWON FLEXY 202 | 14.2s0 | — |
Advisories 1
- ICSA-24-291-04 HMS Networks EWON FLEXY 202 CISA ICS & IT advisories · Oct 17, 2024
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-291-04 government-resource