Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2024-43812

Kieback&Peter DDC4000 Series Path Traversal Insufficiently Protected Credentials

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Kieback & Peter's DDC4000 series has an insufficiently protected credentials vulnerability, which may allow an unauthenticated attacker with access to /etc/passwd to read the password hashes of all users on the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kieback&Peter DDC4040e

Default version status: unaffected

  • 0 to ≤ 1.17.6affected

Kieback&Peter DDC4020e

Default version status: unaffected

  • 0 to ≤ 1.17.6affected

Kieback&Peter DDC4400e

Default version status: unaffected

  • 0 to ≤ 1.17.6affected

Kieback&Peter DDC4200e

Default version status: unaffected

  • 0 to ≤ 1.17.6affected

Kieback&Peter DDC4002e

Default version status: unaffected

  • 0 to ≤ 1.17.6affected

Kieback&Peter DDC4400

Default version status: unaffected

  • 0 to ≤ 1.12.14affected

Kieback&Peter DDC4200-L

Default version status: unaffected

  • 0 to ≤ 1.12.14affected

Kieback&Peter DDC4200

Default version status: unaffected

  • 0 to ≤ 1.12.14affected

Kieback&Peter DDC4100

Default version status: unaffected

  • 0 to ≤ 1.7.4affected

Kieback&Peter DDC4002

Default version status: unaffected

  • 0 to ≤ 1.12.14affected

References