CVE-2008-0174 GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext and allows remote attackers to steal t...
CriticalCVSS 9.8
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext and allows remote attackers to steal the passwords and gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ge proficy real-time information portal | <= 2.6 | No fix listed |
References
- 3590 broken-link third-party-advisory
- 1019273 broken-link third-party-advisory vdb-entry
- support.gefanuc.com broken-link
- VU#180876 third-party-advisory us-government-resource
- 20080125 C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Authentication Vulnerability broken-link mailing-list third-party-advisory vdb-entry
- 20080129 Re: C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Authentication Vulnerability broken-link mailing-list third-party-advisory vdb-entry
- 30754 broken-link third-party-advisory vdb-entry