CVE-2020-23162

Summary:

Sensitive information disclosure and weak encryption in Pyrescom Termod4 time management devices before 10.04k allows remote attackers to read a session-file and obtain plain-text user credentials.

Reference Links(if available):

https://gist.github.com/O24-vdT/85c6aa87f40a6af40dcb03b5b1381760

https://pyres.com/en/solutions/termod-4/

CVSS Score (if available)

v2: / MEDIUM

v3: /

Links to Exploits(if available)