What is CVE-2024-40116?

CVE-2024-40116 is a high-severity vulnerability in N/a, classified under Plaintext Storage of a Password. CVSS score: 8.1/10. Published 2024-07-26.

How severe is CVE-2024-40116?

High severity. CVSS v3 base score is 8.1 out of 10.

Vulnerability in N/a

CVE-2024-40116

An issue in Solar-Log 1000 before v2.8.2 and build 52-23.04.2013 was discovered to store plaintext passwords in the export.html, email.html, and sms.html files -- fixed with 3.0.0-60 11.10.2013 for SL 200, 500, 1000 / not existing for SL 250, 300, 1200, 2000, SL 50 Gateway, SL Base.

EPSS: 0.004 (34.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-256 — Plaintext Storage of a Password

References

cve@mitre.org
cve@mitre.org

Frequently asked questions

What is CVE-2024-40116?: CVE-2024-40116 is a high-severity vulnerability in N/a, classified under Plaintext Storage of a Password. CVSS score: 8.1/10. Published 2024-07-26.
How severe is CVE-2024-40116?: High severity. CVSS v3 base score is 8.1 out of 10.