Skip to content
CVE PROGRAM SOURCE RECORD2.3 Low

CVE-2026-25608

Lack of traffic encryption in STER

Description

STER uses unencrypted TCP traffic to transmit data over the network. It allows an attacker to conduct a Man-In-The-Middle attack and obtain sensitive data such as passwords, personal data, or authentication tokens. This issue was fixed in version 9.5.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Centralny Instytut Ochrony Pracy - Państwowy Instytut Badawczy STER

Default version status: unaffected

  • 0 to < 9.5affected

References