CVE-2020-10609
HIGHGrundfos CIM 500 v06.16.00 - Info Disclosure
Title source: llmDescription
Grundfos CIM 500 v06.16.00 stores plaintext credentials, which may allow sensitive information to be read or allow modification to system settings by someone with access to the device.
Scores
CVSS v3
7.5
EPSS
0.0017
EPSS Percentile
38.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Classification
CWE
CWE-522
CWE-256
Status
published
Affected Products (1)
grundfos/cim_500
Timeline
Published
Jul 27, 2020
Tracked Since
Feb 18, 2026