Vulnerability Details CVE-2019-17218
An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. By default, the communication to the web service is unencrypted via http. An attacker is able to intercept and sniff communication to the web service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 36.2%
CVSS Severity
CVSS v3 Score 9.1
CVSS v2 Score 5.0
Products affected by CVE-2019-17218
-
cpe:2.3:h:vzug:combi-stream_mslq:-
-
cpe:2.3:o:vzug:combi-stream_mslq_firmware:-
-
cpe:2.3:o:vzug:combi-stream_mslq_firmware:ethernet_r07