PurplePetrus/MxCC_Credential-Storage_issue

PurplePetrus/MxCC_Credential-Storage_issue

GitHubGitHub
GitHubgithub.com
Releases0
Stars1
MxCC improper credential storage
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-30018↗
8.8 HIGH6.5 MEDIUM

Mobotix Control Center (MxCC) through 2.5.4.5 has Insufficiently Protected Credentials, Storing Passwords in a Recoverable Format via the MxCC.ini config file. The credential storage method in this software enables an attacker/user of the machine to gain admin access to the software and gain access to recordings/recording locations.