https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 09:59:37 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2021-3252 <p>KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control. Credentials will always be returned in plain-text from the local server during the KACO XP100U authentication process, regardless of whatever passwords have been provided, which leads to an information disclosure vulnerability.</p> <p>KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control. Credentials will always be returned in plain-text from the local server during the KACO XP100U authentication process, regardless of whatever passwords have been provided, which leads to an information disclosure vulnerability.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2021-3252 https://vulnerability.circl.lu/vuln/ghsa-32mh-jmjq-p49p <p>KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control. Credentials will always be returned in plain-text from the local server during the KACO XP100U authentication process, regardless of whatever passwords have been provided, which leads to an information disclosure vulnerability.</p> <p>KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control. Credentials will always be returned in plain-text from the local server during the KACO XP100U authentication process, regardless of whatever passwords have been provided, which leads to an information disclosure vulnerability.</p> https://vulnerability.circl.lu/vuln/ghsa-32mh-jmjq-p49p https://vulnerability.circl.lu/vuln/gsd-2021-3252 gsd-2021-3252 https://vulnerability.circl.lu/vuln/gsd-2021-3252 https://vulnerability.circl.lu/vuln/var-202102-1433 <p>KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control. Credentials will always be returned in plain-text from the local server during the KACO XP100U authentication process, regardless of whatever passwords have been provided, which leads to an information disclosure vulnerability. KAKO HMI is a Human Machine Interface (HMI). A security bypass vulnerability exists in KAKO HMI. An attacker could use this vulnerability to bypass the authentication mechanism and gain access to the affected device. KAKO HMI Is a Scada HMI</p> <p>KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control. Credentials will always be returned in plain-text from the local server during the KACO XP100U authentication process, regardless of whatever passwords have been provided, which leads to an information disclosure vulnerability. KAKO HMI is a Human Machine Interface (HMI). A security bypass vulnerability exists in KAKO HMI. An attacker could use this vulnerability to bypass the authentication mechanism and gain access to the affected device. KAKO HMI Is a Scada HMI</p> https://vulnerability.circl.lu/vuln/var-202102-1433