Phlebas

**Name of the Vulnerable Software and Affected Versions** Pronetiqs IntraVUE versions prior to 3.2.1a14 **Description** An exposure of sensitive system information to an unauthorized control sphere exists, which could lead to the exposure of the underlying host or share filesystem. **Recommendations** Update Pronetiqs IntraVUE to a version later than 3.2.1a14.

**Name of the Vulnerable Software and Affected Versions** Pronetiqs IntraVUE versions prior to 3.2.1a14 **Description** The software stores passwords in plaintext, which could lead to the exposure of cleartext credentials through the API. **Recommendations** Update to a version newer than 3.2.1a14.

**Name of the Vulnerable Software and Affected Versions** Pronetiqs IntraVUE versions prior to 3.2.1a14 **Description** The software contains an unintended proxy or intermediary issue. This flaw allows an attacker to utilize an active proxy to bypass Operational Technology (OT) segmentation, which is a security practice of dividing a network into smaller segments to improve security and performance. **Recommendations** Update Pronetiqs IntraVUE to a version later than 3.2.1a14.

**Name of the Vulnerable Software and Affected Versions** Pronetiqs IntraVUE versions 3.2.1a14 and earlier **Description** An exposure of sensitive system information to an unauthorized control sphere allows unauthenticated users to perform asset discovery. **Recommendations** Update Pronetiqs IntraVUE to a version later than 3.2.1a14.

**Name of the Vulnerable Software and Affected Versions** Pronetiqs IntraVUE versions 3.2.1a14 and earlier **Description** The software uses inadequate encryption strength, which may enable an attacker to steal administrator credentials. This can be achieved through a weak hash or a pass-the-hash attack, where an attacker uses a captured password hash to authenticate to a system without needing the plaintext password. **Recommendations** Update Pronetiqs IntraVUE to a version later than 3.2.1a14.