VULNERABILITY INTELLIGENCE

CVE-2018-9161

CVSS score9.8 CRITICAL
EPSS probability56.71%
CISA KEVNot currently listed
Published2018-03-31
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Prisma Industriale Checkweigher PrismaWEB 1.21 allows remote attackers to discover the hardcoded prisma password for the prismaweb account by reading user/scripts/login_par.js.

Weakness classification

  • CWE-798: Use of Hard-coded Credentials

Primary references