CVE-2017-17691 | BDVDB-2026-106621 Detail

Description#

Homeputer CL Studio fur HomeMatic 4.0 Rel 160808 and earlier uses cleartext to exchange the username and password between server and client instances, which allows remote attackers to obtain sensitive information via a man in the middle attack.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2017-031_homematic.txt

Exploit#

No public exploit known

History#

Version 12018-09-07Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.