Vulnerability Description
Passwords are stored in plain text within the configuration of SICK Package Analytics software up to and including V04.1.1. An authorized attacker could access these stored plaintext credentials and gain access to the ftp service. Storing a password in plaintext allows attackers to easily gain access to systems, potentially compromising personal information or other sensitive information.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sick | Package Analytics | <= 04.1.1 |
Related Weaknesses (CWE)
References
- https://www.sick.com/de/en/service-and-support/the-sick-product-security-incidenVendor Advisory
- https://www.sick.com/de/en/service-and-support/the-sick-product-security-incidenVendor Advisory
FAQ
What is CVE-2020-2078?
CVE-2020-2078 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Passwords are stored in plain text within the configuration of SICK Package Analytics software up to and including V04.1.1. An authorized attacker could access these stored plaintext credentials and g...
How severe is CVE-2020-2078?
CVE-2020-2078 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-2078?
Check the references section above for vendor advisories and patch information. Affected products include: Sick Package Analytics.