CVE-2026-55985

MEDIUM

Tycon Systems TPDIN-Monitor-WEB2 Cleartext Storage of Sensitive Information

Title source: cna

Description

The web management interface in Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read these credentials, which may be used to compromise other systems on the local network.

References (3)

Core 3

Core References

https://www.tyconsystems.com/contact

https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-01

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-202-01.json

View Writeup ZIP pw:eip

Scores

CVSS v3 4.3

EPSS 0.0015

EPSS Percentile 4.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-312

Status published

Products (1)

Tycon Systems/TPDIN-Monitor-WEB2 2.3.9

Published Jul 24, 2026

Tracked Since Jul 25, 2026