Vulnerability Details CVE-2022-29733
Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and store sensitive information in cleartext. This vulnerability allows attackers to intercept HTTP Cookie authentication credentials via a man-in-the-middle attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.0%
CVSS Severity
CVSS v3 Score 5.9
CVSS v2 Score 4.3
References
Products affected by CVE-2022-29733
-
cpe:2.3:h:deltacontrols:entelitouch:-
-
cpe:2.3:o:deltacontrols:entelitouch_firmware:3.33.4005
-
cpe:2.3:o:deltacontrols:entelitouch_firmware:3.40.3706
-
cpe:2.3:o:deltacontrols:entelitouch_firmware:3.40.3935