Ics
Monthly
Credential disclosure in Contec's Remote I/O Coupler Unit (Server Type) CPSN-MCB271 enables an attacker who obtains a device backup file to recover sensitive credentials stored within it in an insufficiently protected form. The root cause (CWE-522) means credentials are not rendered unrecoverable within backup archives, so any party who accesses a backup file can extract usable authentication material. Reported by JPCERT/CC with a CVSS 4.0 score of 8.2, no public exploit code has been identified and the vulnerability is not listed in CISA KEV.
Credential disclosure in Contec's Remote I/O Coupler Unit (Server Type) CPSN-MCB271 enables an attacker who obtains a device backup file to recover sensitive credentials stored within it in an insufficiently protected form. The root cause (CWE-522) means credentials are not rendered unrecoverable within backup archives, so any party who accesses a backup file can extract usable authentication material. Reported by JPCERT/CC with a CVSS 4.0 score of 8.2, no public exploit code has been identified and the vulnerability is not listed in CISA KEV.