VULNERABILITY INTELLIGENCE

CVE-2017-17691

CVSS score8.1 HIGH
EPSS probability1.03%
CISA KEVNot currently listed
Published2018-09-07
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Homeputer CL Studio fur HomeMatic 4.0 Rel 160808 and earlier uses cleartext to exchange the username and password between server and client instances, which allows remote attackers to obtain sensitive information via a man in the middle attack.

Weakness classification

  • CWE-522: Insufficiently Protected Credentials

Primary references