Threat Encyclopedia

NEC.Univerge.WebPro.V6.Clear.Text.Password.Disclosure

description-logoDescription

This indicates an attack attempt to exploit an Information Disclosure Vulnerability in NEC Univerge Sv9100 WebPro.
The vulnerability is due to an design error in the vulnerable application when handling a maliciously crafted request. A remote attacker may be able to exploit this to get arbitrary files on the affected machine via a crafted request.

affected-products-logoAffected Products

NEC Univerge Sv9100 WebPro version 6.00.00

Impact

Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.

recomended-action-logoRecommended Actions

Apply the latest patch from the vendor.
https://www.necam.com/ContactUs/

Other References

45942