VULNERABILITY INTELLIGENCE

CVE-2014-9199

CVSS score5 MEDIUM
EPSS probability2.60%
CISA KEVNot currently listed
Published2015-01-17
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

The Clorius Controls Java web client before 01.00.0009g allows remote attackers to discover credentials by sniffing the network for cleartext-equivalent traffic.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
  • CWE-326: Inadequate Encryption Strength

Primary references