Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-55985 EUVD-2026-48744GHSA-gg6g-q7xj-hhwf

Tycon Systems TPDIN-Monitor-WEB2 Cleartext Storage of Sensitive Information

Published Jul 24, 2026 · Updated Sep 4, 2026 · Assigned by icscert

Description

The web management interface in Tycon Systems TPDIN-Monitor-WEB2

stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read these credentials, which may be used to compromise other systems on the local network.

Affected products

VendorProductAffectedFixed
Tycon Systems TPDIN-Monitor-WEB2 < 2.4.5 2.4.5

Advisories 1

References