CVE-2014-8329

Published: Oct 20, 2014Modified: May 6, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Schrack Technik microControl with firmware before 1.7.0 (937) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain access data for the ftp and telnet services via a direct request for ZTPUsrDtls.txt.

Affected (2)

Products: Schrack: Technik Microcontrol Firmware, Technik Microcontrol

2 products

Technik Microcontrol Firmware

Technik Microcontrol

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Schrack Technik Microcontrol Firmware	Up to 1.7.0
Schrack Technik Microcontrol	All versions

Related CWEs

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (4)

http://seclists.org/fulldisclosure/2014/Jul/40

Source: cve@mitre.org

https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140710-2_Schrack_Technik_Microcontrol_Multiple_critical_vulnerabilities_v10.txt

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2014/Jul/40

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140710-2_Schrack_Technik_Microcontrol_Multiple_critical_vulnerabilities_v10.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.