← Back

CVE-2015-7908

nvd nist
Published: Dec 21, 2015Modified: May 6, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allow remote attackers to discover cleartext passwords by sniffing the network.

Affected (2)

Honeywell
2 products
Midas Firmware
Midas Black Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Midas Firmware
Up to 1.13b1
Running on/withPlatform Versions
Honeywell
Midas
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Midas Black Firmware
Up to 2.13b1
Running on/withPlatform Versions
Honeywell
Midas Black
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: ics-cert@hq.dhs.gov
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.