Skip to content
Not rated

CVE-2021-40366 A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.42), Climatix POL909 (AWM…

Description

A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.42), Climatix POL909 (AWM module) (All versions < V11.34). The web server of affected devices transmits data without TLS encryption. This could allow an unauthenticated remote attacker in a man-in-the-middle position to read sensitive data, such as administrator credentials, or modify data in transit.

Affected products and versions

Product Affected versions Fixed in
Climatix POL909 (AWB module) Versions not published
Climatix POL909 (AWM module) Versions not published
The 4 CVEs of Climatix POL909 (AWB module) →
Track this CVE