In Ice Qube Thermal Management Center versions prior to version 4.13, the web application does not properly authenticate users which may allow an attacker to gain access to sensitive information.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-287,CWE-287,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| iceqube | thermal_management_center_firmware | * |
In Ice Qube Thermal Management Center versions prior to version 4.13, passwords are stored in plaintext in a file that is accessible without authentication.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-256,CWE-522,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| iceqube | thermal_management_center_firmware | * |