PT-2015-4154 · Clorius Controls · Clorius Controls Java Web Client

Published 2015-01-17 · Updated 2025-09-05 · CVE-2014-9199

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Clorius Controls Java web client versions prior to 01.00.0009g

Description The issue allows remote attackers to discover credentials by sniffing the network for cleartext-equivalent traffic.

Recommendations For versions prior to 01.00.0009g, update to version 01.00.0009g or later to resolve the issue.

Fix

Inadequate Encryption Strength

Information Disclosure

Weakness Enumeration

CWE-326

CWE-200

Related Identifiers

CVE-2014-9199

Affected Products

Clorius Controls Java Web Client

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2014-9199 · Security Note
• http://cloriuscontrols.com · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-15-013-02 · Note
• https://cisa.gov/news-events/ics-advisories/icsa-15-013-02 · Note
• https://t.me/cveNotify/134515 · Telegram Post