PT-2022-12456 · Softwarebuero Zauner · Softwarebuero Zauner Arc

Sebastian Hamann · Published 2022-04-05 · Updated 2022-04-14 · CVE-2021-45894

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Softwarebuero Zauner ARC version 4.2.0.4

Description The issue involves cleartext transmission of sensitive information. This means that sensitive data is being sent without proper encryption, potentially exposing it to unauthorized access.

Recommendations For Softwarebuero Zauner ARC version 4.2.0.4, consider restricting access to sensitive information until a fix is available. As a temporary workaround, avoid transmitting sensitive data using the affected software until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2021-45894

Affected Products

Softwarebuero Zauner Arc

References · 5

• 🔥 https://syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-066.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-45894 · Security Note
• https://osv.dev/vulnerability/CVE-2021-45894 · Vendor Advisory
• https://syss.de · Note
• https://t.me/cvenotify/28429 · Telegram Post