Cleartext Password Exposure in vTech VCS754 Version 1.1.1.A to 1.1.1.H

CVE-2023-25437 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

An issue was discovered in vTech VCS754 version 1.1.1.A before 1.1.1.H, allows attackers to gain escalated privileges and gain sensitive information due to cleartext passwords passed in the raw HTML.

Learn more about our Web Application Penetration Testing UK.