CVE-2017-17691

Name of the Vulnerable Software and Affected Versions: Homeputer CL Studio fur HomeMatic version 4.0 Rel 160808 and earlier

Description: The software uses cleartext to exchange the username and password between server and client instances. This allows remote attackers to obtain sensitive information via a man-in-the-middle attack.

Recommendations: For versions 4.0 Rel 160808 and earlier, consider disabling the cleartext password exchange mechanism until a secure alternative is implemented. Restrict access to sensitive information and minimize the risk of exploitation by using secure communication protocols. At the moment, there is no information about a newer version that contains a fix for this vulnerability.