Plaintext Storage of a Password

Storing a password in plaintext may result in a system compromise.

CVEs (210)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-10921 1Siemens 1Logo!8 Bm Firmware Jun 17, 2026 May 14, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Unencrypted storage of passwords in the project could allow an attacker with access to port 10005/tcp to obtain passwords o...Show more A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Unencrypted storage of passwords in the project could allow an attacker with access to port 10005/tcp to obtain passwords of the device. The security vulnerability could be exploited by an unauthenticated attacker with network access to port 10005/tcp. No user interaction is required to exploit this security vulnerability. The vulnerability impacts confidentiality of the device. At the time of advisory publication no public exploitation of this security vulnerability was knownShow less
CVE-2019-0032 1Juniper 2Service Insight Service Now Jun 17, 2026 Apr 10, 2019 N/A· v4 7.8 HIGH· v3 2.1 LOW· v2 A password management issue exists where the Organization authentication username and password were stored in plaintext in log files. A locally authenticated attacker who is able to access these stored plaintext credenti...Show more A password management issue exists where the Organization authentication username and password were stored in plaintext in log files. A locally authenticated attacker who is able to access these stored plaintext credentials can use them to login to the Organization. Affected products are: Juniper Networks Service Insight versions from 15.1R1, prior to 18.1R1. Service Now versions from 15.1R1, prior to 18.1R1.Show less
CVE-2017-6049 13m 1Detcon Sitewatch Gateway Nov 21, 2024 Apr 2, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Detcon Sitewatch Gateway, all versions without cellular, an attacker can edit settings on the device using a specially crafted URL.
CVE-2019-6518 1Moxa 4Eds 405a Firmware Eds 408a FirmwareEds 510a Firmware+1 more Jun 17, 2026 Mar 5, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Moxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by someone with access to the device.
CVE-2017-16714 1Iceqube 1Thermal Management Center Firmware Nov 21, 2024 Sep 6, 2018 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 In Ice Qube Thermal Management Center versions prior to version 4.13, passwords are stored in plaintext in a file that is accessible without authentication.
CVE-2018-8851 1Echelon 4I.lon 100 Firmware I.lon 600 FirmwareSmartserver 1 Firmware+1 more Jun 17, 2026 Jul 24, 2018 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices store passwords in plaintext, which may allow an attacker with acc...Show more Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices store passwords in plaintext, which may allow an attacker with access to the configuration file to log into the SmartServer web user interface.Show less
CVE-2018-7510 1Beaconmedaes 1Scroll Medical Air Systems Firmware Jun 17, 2026 Jun 6, 2018 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 In the web application in BeaconMedaes TotalAlert Scroll Medical Air Systems running software versions prior to 4107600010.23, passwords are presented in plaintext in a file that is accessible without authentication.
CVE-2018-7515 1Omron 1Cx Supervisor Jun 17, 2026 Mar 21, 2018 N/A· v4 5.3 MEDIUM· v3 4.6 MEDIUM· v2 In Omron CX-Supervisor Versions 3.30 and prior, access of uninitialized pointer vulnerabilities can be exploited when CX Supervisor indirectly calls an initialized pointer when parsing malformed packets.
CVE-2017-9856 1Sma 39Sunny Boy 1.5 Firmware Sunny Boy 2.5 FirmwareSunny Boy 3.0 Firmware+36 more May 13, 2026 Aug 5, 2017 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 An issue was discovered in SMA Solar Technology products. Sniffed passwords from SMAdata2+ communication can be decrypted very easily. The passwords are "encrypted" using a very simple encryption algorithm. This enables...Show more An issue was discovered in SMA Solar Technology products. Sniffed passwords from SMAdata2+ communication can be decrypted very easily. The passwords are "encrypted" using a very simple encryption algorithm. This enables an attacker to find the plaintext passwords and authenticate to the device. NOTE: the vendor reports that only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affectedShow less
CVE-2017-7913 1Moxa 6Oncell 5004 Hspa Firmware Oncell 5104 Hsdpa FirmwareOncell 5104 Hspa Firmware+3 more May 13, 2026 May 29, 2017 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 A Plaintext Storage of a Password issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA V...Show more A Plaintext Storage of a Password issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. The application's configuration file contains parameters that represent passwords in plaintext.Show less

Previous 1...7 8 9 1011