PT-2025-27780 · Endress+Hauser+2 · Endress+Hauser Meac300-Fnade4+2
CVE-2025-27451
·
Publicado
2025-07-03
·
Atualizado
2025-07-03
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
The product name cannot be determined.
Description:
The issue arises from the application's behavior of returning different error messages for failed login attempts, depending on whether the failure was due to an incorrect password or a non-existing username. This distinction allows an attacker to deduce existing usernames by analyzing the error messages received during login attempts.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Side Channel Attack
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Endress+Hauser Meac300-Fnade4
Meac300-Fnade4
Meac300-Fnade4 Firmware