CVE-2017-16714

In Ice Qube Thermal Management Center versions prior to version 4.13, passwords are stored in plaintext in a file that is accessible without authentication.

Score

CVSS 3.0 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-09-06

Last modified

2024-09-17

Weaknesses

CWE-256, CWE-522

Affected products

• Thermal Management Center (Ice Qube)
• Thermal Management Center Firmware (Iceqube)

References

• http://www.securityfocus.com/bid/105303
• https://ics-cert.us-cert.gov/advisories/ICSA-18-249-01