CVE-2014-9199CWE-326

CVE-2014-9199: vulnerability in Clorius Controls A/S Java web client

Clorius Controls A/S ISC SCADA Insecure Java Client Inadequate Encryption Strength

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 10epss 2.5%
The Clorius Controls Java web client before 01.00.0009g allows remote attackers to discover credentials by sniffing the network for cleartext-equivalent traffic.
AV:N/AC:L/Au:N/C:C/I:C/A:C